Exam SecOps-Pro Topic 1 Question 40 Discussion

Actual exam question for Palo Alto Networks's SecOps-Pro exam
Question #: 40
Topic #: 1
Consider a scenario where a malware alert from an EDR solution triggers an XSOAR incident. The playbook needs to dynamically determine if the malware is known and, if so, automatically block its hash on all firewalls. If it's unknown, it should submit the sample to a sandbox for analysis. Which XSOAR playbook task best facilitates this dynamic decision-making and execution flow?

Suggested Answer: C Vote an answer

A Conditional Task is specifically designed to evaluate conditions based on incident data or previous task results and then branch the playbook execution path accordingly. In this scenario, it would check if the malware hash is known. If true, it proceeds to block; if false, it proceeds to sandbox submission. Standard tasks are for sequential actions, manual tasks require human intervention, data collection tasks gather information, and sub-playbook tasks execute another playbook, but a Conditional Task is key for dynamic branching based on logic.

by Darren at Apr 05, 2026, 09:04 PM

Limited Time Offer

15%

Off

Get Premium SecOps-Pro Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10