Practice Free XSOAR-Engineer Exam Online Questions
Newly created subplaybooks do not have any inputs, or outputs.
What is necessary to make them functional? (Choose two.)
- A . Define input key in the subplaybook task. Map context values to pull from parent playbook.
- B . The output of the previous task automatically becomes the input of the subplaybook.
- C . Map inputs and outputs to the parent playbook and the subplaybook will use the same values.
- D . Open the subplaybook and add inputs or outputs in the Playbook triggered task.
When creating an automation in XSOAR, what is the best way to create a log message?
- A . Using a debug statement
- B . Using the demisto.debug() function
- C . Using a print statement
- D . Using the demisto.results() function
An incident field is created having the display name as Source_IP.
How can the field be accessed?
- A . ${incident.sourceip}
- B . ${incident.Source_IP}
- C . ${incident.srcip}
- D . ${incident.Source IP}
Assuming an incident type configuration runs the associated playbook automatically, which pre-process rule action can preserve matching incidents without triggering the playbook?
- A . Close
- B . Update
- C . Drop
- D . Link
Which development languages are supported when creating XSOAR automation scripts?
- A . C++, Python, Powershell
- B . Ruby, C++, Python
- C . Javascript, Powershell, C++
- D . Python, Powershell, Javascript
What is the correct definition regarding integration parameters and command arguments?
- A . Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command.
- B . Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command.
- C . Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command.
- D . Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command.
A SOC manager built a dashboard and would like to share the dashboard with other team members.
How would the SOC manager create a dashboard that meets this requirement?
- A . Manually share the dashboard through user emails
- B . Dashboard is shared to all XSOAR users
- C . Propagate the dashboard based on SAML authentication
- D . Dashboard is shared to all XSOAR users in a selected role
D
Explanation:
Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoar-admin/dashboards/share-a-dashboard.html
A SOC manager built a dashboard and would like to share the dashboard with other team members.
How would the SOC manager create a dashboard that meets this requirement?
- A . Manually share the dashboard through user emails
- B . Dashboard is shared to all XSOAR users
- C . Propagate the dashboard based on SAML authentication
- D . Dashboard is shared to all XSOAR users in a selected role
D
Explanation:
Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoar-admin/dashboards/share-a-dashboard.html
In which two ways can data be transferred between playbooks and sub-playbooks? (Choose two.)
- A . Inputs and outputs
- B . Through integration context
- C . Automatically extracted by sub-playbooks
- D . From context data, if context is shared globally
What is the unique identifier for a note in the incident War Room?
- A . Incident ID
- B . Entry ID
- C . Field ID
- D . Note ID