Pre-Summer Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

Palo Alto Networks XSOAR Engineer

Last Update 19 hours ago Total Questions : 204

The Palo Alto Networks XSOAR Engineer content is now fully updated, with all current exam questions added 19 hours ago. Deciding to include XSOAR-Engineer practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our XSOAR-Engineer exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these XSOAR-Engineer sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any Palo Alto Networks XSOAR Engineer practice test comfortably within the allotted time.

Question # 41

Which three authentication methods are supported when logging into XSOAR? (Choose three.)

A.

OTP token

B.

User name and password

C.

SAML

D.

Active Directory authentication

E.

RADIUS

Question # 42

An XSOAR engineer has been tasked with exporting all indicators from the production environment in the last 90 days. The final report needs to be in CSV format containing all indicator fields. How can this task be achieved?

A.

Run the command !GetIndicatorsByQuery in CLI with its default arguments and export all indicators in the last 90 days.

B.

SSH into the server and copy the indicator's database.

C.

In the Threat Intel page, add query firstSeen:>="90 days ago", select All columns in Table View, and click Export to export as a CSV.

D.

Run the command !findIndicators in CLI with the query firstSeen:>="90 days ago" and export to CSV.

Question # 43

What are the out-of-the-box aggregate values that can be applied on widgets data?

A.

Min, Max, Count, Average, Custom Transformers

B.

Min, Max, Count, Average, Custom Group By

C.

Count, Average, Sum, Min, Max

D.

Count, Sum, Min, Max, Transformers

Question # 44

Which three statements are true about the Marketplace? (Choose three.)

A.

Allows reverting back to a previous version of a content pack

B.

Enables users to participate in the community by sharing content

C.

Publishes content without additional review from the Cortex XSOAR team

D.

Allows uploading of content in additional languages

E.

Offers granularity in installation through content packs

Question # 45

When re-assigning an existing incident to a new incident type, an engineer is concerned about the preservation of critical data currently stored in fields that are only associated to the original incident type.

Upon making the change, in which state will the critical data be in the now unassociated fields?.

A.

Hidden from the Context Data but accessible.

B.

Visible within Context Data and fully accessible.

C.

Visible with Context Data, grayed out, and fully accessible.

D.

Hidden from Context Data and no longer accessible.

Question # 46

An XSOAR Engineer has developed a playbook and would like to contribute it to the XSOAR Marketplace to share with other users.

Which two options are available to the Engineer for contributing to the Marketplace? (Choose two.)

A.

Open a ticket with the XSOAR support team

B.

Create a pull request directly on Github

C.

Contribute through the XSOAR UI

D.

Send an email to contributions@xsoar.com

Question # 47

In which two ways can data be transferred between playbooks and sub-playbooks? (Choose two.)

A.

Inputs and outputs

B.

Through integration context

C.

Automatically extracted by sub-playbooks

D.

From context data, if context is shared globally

Question # 48

For troubleshooting, after a log bundle is created, where do the logs appear on the XCSOAR server?

A.

/var/lib/demisto

B.

/tmp/log/demisto

C.

/usr/local/demisto

D.

/var/log/demisto

Question # 49

Which two reasons would lead an engineer to create a custom widget? (Choose two.)

A.

To visualize server configuration keys

B.

To visualize XSOAR list data

C.

To visualize complex incident data calculations

D.

To visualize context data

E.

To visualize a custom query

Question # 50

Management would like to get an incident report automatically following an incident’s closure. How would this be accomplished?

A.

Define a task in a playbook to generate an incident report before the closure occurs

B.

Manually create an ‘Incident Report’

C.

Configure post-processing using a script

D.

Create an ‘Incident Report’ from the Reports page

Go to page: