Question 1

An engineer’s organization system is registered in the following manner: .The engineer created a new indicator type for detecting systems using regex. The engineer would now like theusername to be created as a separate ‘User’ indicator automatically once a system is found.What is the most efficient way for the engineer to achieve this?

Options :

A : Create a custom indicator field named ‘username’ and link it to the internal system indicator

B : Change the reputation command for the internal system indicator type

C : Create a new indicator type of the internal username and set a formatting script to extract only theusername

D : Create a new indicator type of the internal username and have the regex included on any string that hasdash at the beginning

Answer: C

Question 2

Which field type provides an interactive and editable display of table-based data?

Options :

A : HTML

B : Grid (table)

C : Markdown

D : Multi Select

Answer: B

Question 3

An organization has recently acquired another company as its subsidiary. The subsidiary has its infrastructureon AWS cloud as illustrated in the image below:The organization wants to use the mail server location on the subsidiary's cloud to send emails. Withoutacquiring additional licenses, which XSOAR component can fulfill the requirement?

Options :

A : XSOAR D2 Agents, to send the required emails.

B : An XSOAR engine that is downloaded from the XSOAR server and installed within the subsidiary.

C : Another XSOAR server that uses the same license as their primary XSOAR server.

D : A Linux server connected with an XSOAR server using SSH integration. Commands can be runremotely to access the mail server.

Answer: D

Question 4

What is the default landing page for a new user in XSOAR?

Options :

A : Dashboards

B : Threat Intel

C : Settings

D : Marketplace

Answer: A

Question 5

Which two statements accurately describe layouts? (Choose two.)

Options :

A : Layouts override classification and mapping

B : New tabs can be added to the incident layout

C : Layouts can display incident information and custom fields

D : Layouts add or remove custom fields from an incident type

Answer: B,C

Free XSOAR-Engineer Mock Exam – Practice Online Confidently

Buying Options: