Exam XSIAM-Engineer Topic 2 Question 51 Discussion

Actual exam question for Palo Alto Networks's XSIAM-Engineer exam
Question #: 51
Topic #: 2

You are tasked with hardening the security posture of custom integrations within your XSIAM marketplace content packs. Specifically, you need to ensure that API keys and sensitive credentials used by these integrations are stored and accessed securely. Which of the following is the most secure and recommended method for managing these secrets within the XSIAM environment?

A. Hardcode API keys directly into the Python code of the integration's script. This makes them immediately available. B. Store API keys as plaintext in the integration's YAML configuration file, as these files are only accessible to administrators. C. Utilize XSIAM's built-in credential store (secure parameters) for sensitive information. Integrations should access these parameters at runtime, and their values are encrypted at rest. D. Encrypt API keys externally and then paste the encrypted string into the integration's configuration. The integration script will then decrypt it at runtime using a hardcoded decryption key. E. Prompt the user for API keys every time the integration command is executed within a playbook.

Suggested Answer: C Vote an answer

Option C is the most secure and recommended method. XSIAM (XSOAR) provides a secure credential store (often referred to as 'secure parameters' or 'instance settings' for integrations) specifically designed for managing sensitive information like API keys. These parameters are encrypted at rest and can be securely referenced by integration instances, ensuring that sensitive data is not exposed in code or configuration files. Options A, B, and D are highly insecure practices. Option E is impractical for automated playbooks.

by Lewis at Jul 16, 2026, 07:23 PM

Limited Time Offer

15%

Off

Get Premium XSIAM-Engineer Questions as Interactive Self Test Engine or PDF

Comments

0 Happy Clients

0 Shares

0 Demo Downloads

10 Years in Business