XSOAR-Engineer Practice Questions

A.  

The post-processing tag must be added to the automation

B.  

Post-processing scripts must be added at the end of playbooks

C.  

Post-processing scripts must be added from the Incident Type editor

D.  

Post-processing scripts must be added from the Post-Process Rules editor

A.  

DeleteContext

B.  

GenerateTest

C.  

PrintContext

D.  

SetContext

A.  

Whois.IP.asn_registry.entities.

B.  

Whois.IP.[0].network.name.

C.  

Whois.IP.network.name.

D.  

Whois.IP.entities.

A.  

Mapping.

B.  

Playbook execution.

C.  

Ingestion.

D.  

Classification.

A.  

${Files.[2].Name}

B.  

${Files.Name.[2]}

C.  

${File.[1].Name}

D.  

${File.Name.[1]}

A.  

Revoke the relationship.

B.  

Update the relationship type.

C.  

Expire the IP address indicator.

D.  

Update the indicator relationship description.

A.  

can run on multiple docker containers

B.  

can be set to run on a scheduled basis in the automation settings

C.  

can be password protected

D.  

can be written in C++

A.  

Use Shell installer and create a custom JSON configuration file.

B.  

Use different docker instances in the machine to install each engine.

C.  

Use Shell installer with "Allow running multiple engines.".

D.  

Create a DEB installer and modify in the JSON configuration.

A.  

!addToList listName="BlockedSenders_Email" listData="".

B.  

!appendToListContext listPath="BlockedSenders Email" data="".

C.  

!setIncident list.BlockedSenders_Emai1="".

D.  

!createListItem listName="BlockedSenders_Email" itemValue="".

A.  

Cortex Gateway.

B.  

Tenant.

C.  

Customer Support Portal.

D.  

Palo Alto Networks Hub.