Summer Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

Palo Alto Networks XSOAR Engineer

Last Update 20 hours ago Total Questions : 204

The Palo Alto Networks XSOAR Engineer content is now fully updated, with all current exam questions added 20 hours ago. Deciding to include XSOAR-Engineer practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our XSOAR-Engineer exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these XSOAR-Engineer sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any Palo Alto Networks XSOAR Engineer practice test comfortably within the allotted time.

Question # 1

Match the operations with the appropriate context.

Question # 2

Which three options can be defined in the layout settings? (Choose three.)

A.

Set of fields to present

B.

Permission to view the tab based on ‘Users’

C.

Permission to view the tab based on ‘Roles’

D.

Delete built-in tabs including the war room

E.

Dynamic sections

Question # 3

How long is the trial period for paid content packs?

A.

30 days

B.

14 days

C.

7 days

D.

60 days

Question # 4

What will happen if a playbook debugger is left running for more than 24 hours?

A.

By default, every 24 hours, the system closes any debugger sessions that have been open for more than 180 minutes.

B.

The session must be stopped during 180 minutes manually by administrator, user will receive notification automatically.

C.

The session will be running till stopped manually by administrator.

D.

By default, the system closes automatically any debugger session that have been open 180 minutes.

Question # 5

When browsing the Marketplace for new content packs, which details about each pack are you able to view?

A.

The integration’s source code

B.

A summary of each version history

C.

A test instance for the content pack

D.

The source code of each playbook

Question # 6

When the verdict of an indicator is set manually, which source reliability does it receive?.

A.

F - reliability cannot be found.

B.

A.

C.

Undefined.

D.

A+++.

Question # 7

A playbook loop that interacts with Active Directory for user details (yielding extensive data) is altered to extract newly acquired indicators of compromise (IOCs). This change results in two critical issues:

• Rate limits being hit on integrated reputation services

• Incidents associated with hundreds of indicators

Given the settings below, what would prevent the issues in this use case?

Incident Type: AD-Analysis –

Extract Indicators on Incident Creation: Use System Default (None)

Extract Indicators on Field Change: Inline

Task 1: ad-get-user –

Mark results as note: False –

Indicator Extract Mode: Inline –

Quiet Mode: False –

Task 2: ad-disable-account –

Mark results as note: True –

Indicator Extract Mode: None –

Quiet Mode: True –

Task 3: servicenow-update-ticket –

Mark results as note: False –

Indicator Extract Mode: Use System Default

Quiet Mode: False

A.

Set AD-Analysis incident creation extraction to "Extract specific indicators.”

B.

Set ad-get-user indicator extraction mode to None.

C.

Set servicenow-update-ticket indicator extraction mode to Inline.

D.

Disable the feature that allows marking task outputs as notes.

Question # 8

An administrator has noticed that an incident fetch has failed, causing several internal workflows to be backed up. The administrator would like to receive notifications the next time the incident fetch fails.

How can they achieve this?

A.

Create a custom playbook that sends an email each time the fetch fails.

B.

Create a new integration that monitors the incident fetch and sends an email if the fetch fails.

C.

Schedule a job that runs and monitors incidents in XSOAR that will send an email if there are no new incidents.

D.

Add a server config to notify when incident fetch fails.

Question # 9

When creating an automation in XSOAR, what is the best way to create a log message?

A.

Using a debug statement

B.

Using the demisto.debug() function

C.

Using a print statement

D.

Using the demisto.results() function

Question # 10

Match the appropriate action to the layout type.

Go to page: