Palo Alto Networks XSOAR Engineer - XSOAR-Engineer FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Arrange these steps in the order that they occur during an incident fetch.

Discussion 0

Correct Answer:

Explanation:
Integration performs
Classification is applied
Mapping is applied
Incident is created (before incident creation it should be also pre-process rule step)

Question 2

What is the correct definition regarding integration parameters and command arguments?

A. Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command. B. Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command. C. Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command. D. Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command.

Discussion 0

Correct Answer: B Vote an answer

Question 3

A SOC team must send a notification email to specific teams based on the severity of an incident.
Which feature will accomplish this task each time the severity escalates?.

A. Field-change trigger script. B. Server config. C. SLA script. D. Post-processing rule.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

A playbook task is set up to run an integration command that takes no input and which outputs information to the context. The integration has several instances configured.
Which action will ensure the integration command only runs once?.

A. Specify the using- parameter to target a specific integration instance to run. B. Click on Performance # Run Limits to specify the maximum run count before the task exits. C. Specify the runlimit= parameter to limit the number of times a specific command will run. D. Click on Advanced Options # Limits to specify the minimum / maximum run limits for a command.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

What is the correct expression to use when filtering only PDF files?

A. Use File.Extension contains (general) PDF B. Use File.Extension that does not equal (string comparison) PDF C. Use File.Name contains PDF D. Use File.Extension equals (string comparison) PDF

Discussion 0

Correct Answer: D Vote an answer

Question 6

Which three scripting languages can an engineer use to write XSOAR automations? (Choose three.)

A. Python B. Perl C. Go D. Powershell E. JavaScript

Discussion 0

Correct Answer: A,D,E Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Which three support types are included in the Marketplace Content Packs? (Choose three.)

A. Partner supported B. Contex XSOAR supported C. Customer supported D. Community supported E. Prisma Cloud supported

Discussion 0

Correct Answer: A,B,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

When the "Only allow these dashboards" checkbox is selected for a user role, what is the primary effect on users assigned this role?.

A. They are prompted to select their preferred dashboards upon login and can only modify these chosen dashboards. B. They will be restricted to viewing only the specified default dashboards and cannot make any modifications. C. They will automatically have all dashboards that are shared with them added to their view. D. They can only view specified dashboards and make minor modifications.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

Which two components have their own context data? (Choose two.)

A. Task B. Field C. Incident D. Sub-playbook

Discussion 0

Correct Answer: C,D Vote an answer

Question 10

On the System Diagnostics page, what is the default minimum size for a Work Plan to be considered big?

A. 5MB B. 3MB C. 1MB D. 2MB

Discussion 0

Correct Answer: C Vote an answer