Practice Free XSOAR-Engineer Exam Online Questions
Which two reasons would lead an engineer to create a custom widget? (Choose two.)
- A . To visualize server configuration keys
- B . To visualize XSOAR list data
- C . To visualize complex incident data calculations
- D . To visualize context data
- E . To visualize a custom query
DE
Explanation:
Reference: https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/cortex-xsoar-admin.pdf/cortex-xsoar-admin.pdf
While testing a custom integration, an XSOAR engineer noticed that the incident fetch interval is missing.
How can this be fixed?
- A . Define the Incident Fetch Interval when running the integration’s commands.
- B . Duplicate the integration. Edit the resulting copy and add incident Fetch Interval as a parameter.
Save the integration. Configure the new integration instance with the interval required. - C . Configure the application to send incidents on the required interval.
- D . Duplicate the integration. Add the interval in the code. Save the integration and Configure the new integration instance with the interval required.
Previous playbook tasks have built out the context in the image below.
When specifying ${User.Name} as an input for a sub playbook task which has the default loop configuration, how many times will the sub-playbook be executed?
- A . 0
- B . 1
- C . 3
- D . 4
What is used to trigger playbooks automatically based on the classification of an incident?
- A . Indicator type
- B . Incoming mapper
- C . Incident types
- D . Integration configuration
Based on the image below, what will be the type of this new incident?
- A . Cortex XDR Incident – Quasar
- B . Cortex XDR Incident
- C . Unclassified
- D . Default
Which two solutions are available to scale an overloaded XSOAR environment? (Choose two.)
- A . Add a distributed database server
- B . Add an indexing server
- C . Add a live backup server (disaster recovery)
- D . Add an engine
An engineer defined a dashboard which allows important metrics to be displayed. The engineer would like to make this dashboard the default dashboard.
How can it be accomplished?
- A . Default Dashboard can be defined by ‘Role’
- B . Use the server configuration key: default.dashboards
- C . Save the dashboard as a widget and apply it to all users
- D . Right click on the dashboard tab and ‘Set as Default’
A
Explanation:
Reference: https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/monitoring/cortex-xdr-dashboard/manage-dashboards.html
When developing the playbook, which of the following can be used by a XSOAR Administrator?
- A . The Debugger panel to test data with one of last five incidents. This will affect the incident’s original incident data.
- B . Context data from existing incidents by exporting the YAML data from incidents and importing it to playbook editor.
- C . Debugger panel and XML data from a similar incident with New Mock Incident. This will not affect the incidents original incident data.
- D . The Debugger panel to test data with one of last fifty incidents. This will not affect the incident’s original incident data.
Whar are possible war room result (entry) types?
- A . Context, file, error, image
- B . Note, indicator, error, image
- C . Video, file, error, image
- D . Note, file, error, image