New Year Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 70track

Free Paloalto Networks XSOAR-Engineer Practice Exam with Questions & Answers | Set: 2

Questions 11

A playbook task is set up to run an integration command that takes no input and which outputs information to the context. The integration has several instances configured.

Which action will ensure the integration command only runs once?.

Options:
A.

Specify the using- parameter to target a specific integration instance to run.

B.

Click on Advanced Options → Limits to specify the minimum / maximum run limits for a command.

C.

Click on Performance → Run Limits to specify the maximum run count before the task exits.

D.

Specify the runlimit= parameter to limit the number of times a specific command will run.

Paloalto Networks XSOAR-Engineer Premium Access
Questions 12

Which investigation element is best suited for collaboration among users?

Options:
A.

Work Plan

B.

Related Incidents

C.

War Room

D.

Context Data

Questions 13

An engineer defined a dashboard which allows important metrics to be displayed. The engineer would like to make this dashboard the default dashboard.

How can it be accomplished?

Options:
A.

Default Dashboard can be defined by ‘Role’

B.

Use the server configuration key: default.dashboards

C.

Save the dashboard as a widget and apply it to all users

D.

Right click on the dashboard tab and ‘Set as Default’

Questions 14

Which two features does XSOAR offer to help recover from a server failure? (Choose two.)

Options:
A.

Live backup (disaster recovery)

B.

Distributed database

C.

Backup data to XSOAR engines

D.

Local backup

Questions 15

A Cortex XSOAR Administrator is tasked with building a button for an analyst in order for the analyst to be assigned to the incident as an owner. What is the process?

Options:
A.

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with no argument

B.

Edit the incident layout to add a new button that calls the AssignToMeButton automation with argument assignBy={me}

C.

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument owner={me}

D.

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument assignBy=current

Questions 16

Which three scripting languages can an engineer use to write XSOAR automations? (Choose three.)

Options:
A.

Python

B.

Perl

C.

Go

D.

JavaScript

E.

Powershell

Questions 17

An XSOAR Engineer has developed a playbook and would like to contribute it to the XSOAR Marketplace to share with other users.

Which two options are available to the Engineer for contributing to the Marketplace? (Choose two.)

Options:
A.

Open a ticket with the XSOAR support team

B.

Create a pull request directly on Github

C.

Contribute through the XSOAR UI

D.

Send an email to contributions@xsoar.com

Questions 18

An administrator has noticed that an incident fetch has failed, causing several internal workflows to be backed up. The administrator would like to receive notifications the next time the incident fetch fails.

How can they achieve this?

Options:
A.

Create a custom playbook that sends an email each time the fetch fails.

B.

Create a new integration that monitors the incident fetch and sends an email if the fetch fails.

C.

Schedule a job that runs and monitors incidents in XSOAR that will send an email if there are no new incidents.

D.

Add a server config to notify when incident fetch fails.

Questions 19

Which two incident search queries are valid? (Choose two.)

Options:
A.

created:>=”7 days”

B.

owner===admin

C.

role is Analyst

D.

status:closed –category:job

Questions 20

An engineer must create a playbook task which asks a user a single question to determine the next step in the playbook flow.

Which type of task will accomplish this goal?.

Options:
A.

Standard task using manual task settings.

B.

Data collection task using the task option.

C.

Conditional task using the ask option.

D.

Data collection task using the generated link option.