New Year Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: xmas50

Paloalto Networks XSOAR-Engineer - Palo Alto Networks XSOAR Engineer

Paloalto Networks XSOAR-Engineer Premium Access     Download Demo    
Page: 5 / 6
Total 204 questions

Which field type provides an interactive and editable display of table-based data?

A.

HTML

B.

Grid (table)

C.

Markdown

D.

Multi Select

An engineer would like to change an incident’s SLA according to the severity field changes. How can the engineer achieve this task?

A.

Use a field trigger script

B.

Use a field display script

C.

Create a job that queries for incident severity changes

D.

Change the SLA manually every time the severity changes

In which two scenarios would it be appropriate to implement a loop for a sub-playbook? (Choose two.)

A.

In repetitive process flows to iterate for each playbook input

B.

When continuously ingesting incidents from third-party systems

C.

In repetitive process flows with no more than 10 loops

D.

In repetitive processes that requires sub-playbook re-execution

Based on the image below, which key from the context points to the string GOGL?.

A.

Whois.IP.asn_registry.entities.

B.

Whois.IP.[0].network.name.

C.

Whois.IP.network.name.

D.

Whois.IP.entities.

When creating an automation in XSOAR, what is the best way to create a log message?

A.

Using a debug statement

B.

Using the demisto.debug() function

C.

Using a print statement

D.

Using the demisto.results() function

Based on the image below, what could be the reason for this behavior?.

A.

Indicator Reputation from the feed is set to "Malicious.".

B.

Source Reliability needs to be increased to "A - Completely reliable.".

C.

The Indicator Expiration Method needs to be set to "Never Expire.".

D.

The Traffic Light Protocol Color is empty.

In which two ways can data be transferred between playbooks and sub-playbooks? (Choose two.)

A.

Inputs and outputs

B.

Through integration context

C.

Automatically extracted by sub-playbooks

D.

From context data, if context is shared globally

If a known malicious domain is no longer associated with a specific IP address, which action will make the association inactive?.

A.

Revoke the relationship.

B.

Update the relationship type.

C.

Expire the IP address indicator.

D.

Update the indicator relationship description.

When is the post-processing script executed in XSOAR?

A.

Just after the incident is created

B.

Just after the pre-processing is executed

C.

Just after the playbook is executed

D.

Just after the Close Incident button is clicked

What is the correct way to install different engines on the same Ubuntu machine for a Dev/Prod setup?.

A.

Use Shell installer and create a custom JSON configuration file.

B.

Use different docker instances in the machine to install each engine.

C.

Use Shell installer with "Allow running multiple engines.".

D.

Create a DEB installer and modify in the JSON configuration.