Security Operations XSOAR-Engineer Book

Palo Alto Networks XSOAR Engineer Questions and Answers

Question 17

A Cortex XSOAR Administrator is tasked with building a button for an analyst in order for the analyst to be assigned to the incident as an owner. What is the process?

Options:

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with no argument

Edit the incident layout to add a new button that calls the AssignToMeButton automation with argument assignBy={me}

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument owner={me}

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument assignBy=current

Question 18

A playbook task generates a report as HTML in the context data.

An engineer creates a custom indicator field of type "HTML" and adds the field to a section in a custom indicator layout. How can the engineer populate the HTML field in the indicator layout?

Options:

Populate the custom indicator field with the built-in !SetIndicator command.

Add HTML to a list using !setList and use it as an HTML template to populate the custom indicator field.

Create a custom Indicator Mapper and populate the custom indicator field.

Use the Mapping option in the playbook task that generates the HTML report to populate the custom indicator field.

Question 19

The code snippet below is from the fetch command of an integration instance configured to run on the server.

demisto.debug(f"(len(incidents)} events fetched")

Where is the output from the snippet located when the instance runs an automatic fetch?.

Options:

Incident label.

Platform Log bundle.

Integration Logs table.

War Room entry.

Question 20

In a Dev/Prod deployment model, what is available only in the development tenant?.

Options:

Marketplace.

Content Repository page.

Custom integration instances.

"Export all custom content" feature.

New Year Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Security Operations XSOAR-Engineer Book

Palo Alto Networks XSOAR Engineer Questions and Answers

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Explanation:

Options:

Answer:

Explanation:

CompTIA

Fortinet

Microsoft

Salesforce