Summer Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

Palo Alto Networks XSOAR Engineer

Last Update 21 hours ago Total Questions : 204

The Palo Alto Networks XSOAR Engineer content is now fully updated, with all current exam questions added 21 hours ago. Deciding to include XSOAR-Engineer practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our XSOAR-Engineer exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these XSOAR-Engineer sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any Palo Alto Networks XSOAR Engineer practice test comfortably within the allotted time.

Question # 11

What can be used as integration parameters?

A.

URL, API key, port

B.

URL, certificate, image

C.

Token, query, playbook

D.

User-password, csv file, query

Question # 12

Which field type provides an interactive and editable display of table-based data?

A.

HTML

B.

Grid (table)

C.

Markdown

D.

Multi Select

Question # 13

Which two capabilities do Automation script settings include? (Choose two.)

A.

Define ‘parameters’

B.

Correlate to incident types

C.

Define ‘outputs’

D.

Set password protection

Question # 14

What does Script helper contain?

A.

Available commands

B.

Permission settings

C.

Automation version history

D.

Automation timeout configuration

Question # 15

Which two advanced attributes can be applied to incident fields when editing? (Choose two.)

A.

Set a field trigger script

B.

Associate to an incident type

C.

Change field type

D.

Change field name

Question # 16

Which two options will troubleshoot an integration’s fetch incidents command? (Choose two.)

A.

In the instance settings, enable the fetch incidents parameter and wait for one minute

B.

Create a one task playbook with a fetch-incident command

C.

execute ! < integration_instance_name > -fetch

D.

execute ! < integration_name > -fetch

Question # 17

After executing the DeleteContext automation with all=yes argument, how would the context data of an incident present?

A.

All the data, including the incident key will be deleted, and the context data will be completely empty.

B.

No difference, the automation cannot be executed manually.

C.

All context data, including custom incident fields will be deleted, system incident fields will remain.

D.

All context data, except the incident key will be deleted.

Question # 18

To avoid exceeding API quotas for third-party services, indicators are only updated after the indicator cache expiration period. What is the default cache expiration period for indicators in XSOAR (minutes/days)?

A.

10,080 minutes (7 days)

B.

20,160 minutes (14 days)

C.

21,600 minutes (15 days)

D.

4,320 minutes (3 days)

Question # 19

An analyst runs the following command in a playbook task:

!ip ip=1.1.1.1

Which extraction mode needs to be enabled on the Advanced tab of the playbook task to synchronously extract indicators from the results of this command?

A.

Synchronous

B.

Extract

C.

Out of band

D.

Inline

Question # 20

What happens if both a Classifier and Incident Type are configured in an integration instance's settings?

A.

The administrator will receive a notification that there is both a Classifier and Incident Type set for that integration instance.

B.

The Incident Type will be ignored, and incoming incidents will be classified according to the Classifier.

C.

The Classifier will be ignored, and incoming incidents will be classified according to the Incident Type.

D.

Both the Classifier and Incident Type will classify incoming incidents.

Go to page: