最新的Palo Alto Networks XSOAR Engineer - XSOAR-Engineer免費考試真題

A. Pre-process rule.

B. Incident playbook.

C. Integration instance settings.

D. Incident type.

A. To generate new widgets for a dashboard

B. To automate tasks such as parsing a file or enriching indicators

C. To highlight different paths in a playbook

D. To create an incident or escalate an existing incident

A. To loop the sub-playbook over all defined sub-playbook inputs

B. To loop the sub-playbook over all context values present in the investigation

C. To loop the sub-playbook over all incident fields for the given incident

D. To loop the sub-playbook over all the fields marked as important

A. ${File.[1].Name}

B. ${Files.Name.[2]}

C. ${File.Name.[1]}

D. ${Files.[2].Name}

A. Add the playbook to the integration's settings

B. Select 'Run playbook automatically' from the incident type settings

C. Select 'Run playbook automatically' from the integration settings

D. Add the !startinvestigation automation to the beginning of the playbook

A. All context data, except the incident key will be deleted.

B. No difference, the automation cannot be executed manually.

C. All the data, including the incident key will be deleted, and the context data will be completely empty.

D. All context data, including custom incident fields will be deleted, system incident fields will remain.

A. Source Reliability needs to be increased to "A - Completely reliable.".

B. The Traffic Light Protocol Color is empty.

C. Indicator Reputation from the feed is set to "Malicious.".

D. The Indicator Expiration Method needs to be set to "Never Expire.".

A. It is immediately deleted from the database.

B. It still exists but is not searchable.

C. It still exists and can be searched.

D. It is deleted from the database after seven days.

A. Pass data between playbook tasks

B. Store incident information in XML format

C. Pass data between to-do tasks

D. Store incident information in JSON format