Summer Special Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

Question # 4

During the regular maintenance of XSOAR a customer noticed that there was an update available for the Active Directory content pack (current version 1.4.6) and updated the content pack to the latest version (version 1.4.11). However, after the update the customer noticed that the Active Directory Query integration is not working properly and asked you to resolve the issue.

Which of the following set of steps can help to resolve the issue?

A.

Navigate to Settings

View the configured integrations and select Active Directory Authentication

Delete all integration instances and add all integration instances again

B.

Navigate to Marketplace

View the installed content pack and select Active Directory content pack

Select version 1.4.6 and click on "Revert to this version"

C.

Navigate to Settings

View the configured integrations and select Active Directory Query

Delete all integration instances and add all integration instances again

D.

Navigate to Marketplace

View the installed content pack and select Active Directory content pack

Click on uninstall content pack

Navigate to Marketplace browser and reinstall the Active Directory content pack

Full Access
Question # 5

An engineer would like to change an incident’s SLA according to the severity field changes. How can the engineer achieve this task?

A.

Use a field trigger script

B.

Use a field display script

C.

Create a job that queries for incident severity changes

D.

Change the SLA manually every time the severity changes

Full Access
Question # 6

Reliability scores in XSOAR range from A through F. What do A and F stand for?

A.

F - Reliability cannot be judged, A - Completely Reliable

B.

F - Not reliable, A - Usually Reliable

C.

F - Not usually reliable, A - Fairly Reliable

D.

F - Unreliable, A - Completely Reliable

Full Access
Question # 7

What are the out-of-the-box aggregate values that can be applied on widgets data?

A.

Min, Max, Count, Average, Custom Transformers

B.

Min, Max, Count, Average, Custom Group By

C.

Count, Average, Sum, Min, Max

D.

Count, Sum, Min, Max, Transformers

Full Access
Question # 8

What will happen if a playbook debugger is left running for more than 24 hours?

A.

By default, every 24 hours, the system closes any debugger sessions that have been open for more than 180 minutes.

B.

The session must be stopped during 180 minutes manually by administrator, user will receive notification automatically.

C.

The session will be running till stopped manually by administrator.

D.

By default, the system closes automatically any debugger session that have been open 180 minutes.

Full Access
Question # 9

Match the operations with the appropriate context.

Full Access
Question # 10

Given the following context data, what would be the expected output of the expression?

A.

1E56733826E5035233A097FCEA2046AF96EC616C

B.

E6EF5142E2553C1E442A0FFAC07636EAC61E6EDD

C.

8D193FA162A305E4859BA8C45F5121F7265E3ABB

D.

e6ef5142e2553c1e442a0ffac07636eac61e6edd

Full Access
Question # 11

Which XSOAR architecture would be recommended for Managed Security Service Providers (MSSP)?

A.

Multi-region

B.

Dev-Prod

C.

Multi-tenant

D.

Distributed database

Full Access
Question # 12

You can customize most aspects of the incident layout, including which three of the following? (Choose three.)

A.

Which users have permissions to view the tabs

B.

Which roles have permissions to view the tabs

C.

Which dashboard settings are applied

D.

The information and how is it displayed

E.

Which tabs appear and in which order

Full Access
Question # 13

Which two functions in XSOAR are incident types used for? (Choose two.)

A.

To run dedicated playbooks for different event types

B.

To classify events ingested from various sources into the relevant types

C.

To classify indicators extracted in XSOAR incidents to their respective types

D.

To facilitate role based access to XSOAR incidents

Full Access
Question # 14

Where can engineers add the post-processing scripts to incidents?

A.

The post-processing tag must be added to the automation

B.

Post-processing scripts must be added at the end of playbooks

C.

Post-processing scripts must be added from the Incident Type editor

D.

Post-processing scripts must be added from the Post-Process Rules editor

Full Access
Question # 15

What is the difference between labels and fields?

A.

Fields can be used in playbooks and labels cannot

B.

Fields are indexed in the database and labels are not

C.

Labels can be used in queries and fields cannot

D.

Labels are indexed in the database and fields are not

Full Access
Question # 16

Which two input requirements are needed to train a machine learning model? (Choose two.)

A.

3000 Incidents

B.

Incident Field

C.

Verdict Label

D.

Incident Type

Full Access
Question # 17

How can Cortex XSOAR administrators prevent junior analysts from viewing a senior analyst dashboard?

A.

Share the dashboard in Read and Edit mode for senior analysts.

B.

Share the dashboard in Read & Edit mode for senior analysts and Read Only for juniors analysts.

C.

Share the dashboard in Read and Write mode for senior analysts.

D.

Share the dashboard in Read Only mode for junior analysts and senior analysts.

Full Access
Question # 18

Inside the Incidents table view, which actions can be performed on the selected incidents? (Choose two.)

A.

Run Command, Export, and Close and Delete for all selected incidents regardless of their status

B.

Assign, Edit, and Mark as Duplicate for all selected incidents regardless of their status

C.

Run Command for all selected incidents having Active status

D.

Export incidents as JSON and change incident status

Full Access
Question # 19

Which development languages are supported when creating XSOAR automation scripts?

A.

C++, Python, Powershell

B.

Ruby, C++, Python

C.

Javascript, Powershell, C++

D.

Python, Powershell, Javascript

Full Access
Question # 20

Which playbook will a job run by default?

A.

The playbook assigned to the incident type

B.

The playbook assigned to the indicator type

C.

The playbook assigned during pre-processing

D.

The playbook assigned by the integration

Full Access
Question # 21

By default, automation written in which language will be executed in a Docker container?

A.

Python

B.

Go

C.

JavaScript

D.

Perl

Full Access
Question # 22

Which configuration is a valid distributed database (DB) implementation?

A.

2 main DBs, 1 application server, 2 node servers

B.

1 main DB, 1 application server, 3 node servers

C.

2 application servers, 1 main DB, 1 node server

D.

1 application server, 2 main DBs, 1 node server

Full Access