XSOAR-Engineer Premium Exam Questions

Palo Alto Networks XSOAR Engineer Questions and Answers

Question 5

Which two functions in XSOAR are incident types used for? (Choose two.)

To run dedicated playbooks for different event types

To classify events ingested from various sources into the relevant types

To classify indicators extracted in XSOAR incidents to their respective types

To facilitate role based access to XSOAR incidents

Question 6

Threat Intel search queries can be shared with which of the following? (Select 1)

Users defined in the platform (email or username)

Other organizations via the Marketplace

Users outside XSOAR via email invite

Roles defined in the platform

Question 7

Management would like to get an incident report automatically following an incident’s closure. How would this be accomplished?

Define a task in a playbook to generate an incident report before the closure occurs

Manually create an ‘Incident Report’

Configure post-processing using a script

Create an ‘Incident Report’ from the Reports page

Question 8

Based on the image below, which key from the context points to the string GOGL?.

Whois.IP.asn_registry.entities.

Whois.IP.[0].network.name.

Whois.IP.network.name.

Whois.IP.entities.