Question 1

Which two methods are used to add new content to the XSOAR Content Repository? (Choose two.)

Options :

A : Create content and add it to the standard content by contributing through the Marketplace

B : Use the XSOAR GitHub Contribution Guide to add the contribution to the standard content

C : Create a support ticket with the custom content for review by the support team

D : Any custom content will be automatically uploaded to the content repository

Answer: A,D

Question 2

Which two statements accurately describe layouts? (Choose two.)

Options :

A : Layouts override classification and mapping

B : New tabs can be added to the incident layout

C : Layouts can display incident information and custom fields

D : Layouts add or remove custom fields from an incident type

Answer: B,C

Question 3

An engineer’s organization system is registered in the following manner: .The engineer created a new indicator type for detecting systems using regex. The engineer would now like theusername to be created as a separate ‘User’ indicator automatically once a system is found.What is the most efficient way for the engineer to achieve this?

Options :

A : Create a custom indicator field named ‘username’ and link it to the internal system indicator

B : Change the reputation command for the internal system indicator type

C : Create a new indicator type of the internal username and set a formatting script to extract only theusername

D : Create a new indicator type of the internal username and have the regex included on any string that hasdash at the beginning

Answer: C

Question 4

During configuration of the inputs of a sub-playbook in the main playbook, there is an option under the Looptab called "For Each Input". What is this option used to?

Options :

A : To loop the sub-playbook over all context values present in the investigation

B : To loop the sub-playbook over all incident fields for the given incident

C : To loop the sub-playbook over all the fields marked as important

D : To loop the sub-playbook over all defined sub-playbook inputs

Answer: D

Question 5

An organization has recently acquired another company as its subsidiary. The subsidiary has its infrastructureon AWS cloud as illustrated in the image below:The organization wants to use the mail server location on the subsidiary's cloud to send emails. Withoutacquiring additional licenses, which XSOAR component can fulfill the requirement?

Options :

A : XSOAR D2 Agents, to send the required emails.

B : An XSOAR engine that is downloaded from the XSOAR server and installed within the subsidiary.

C : Another XSOAR server that uses the same license as their primary XSOAR server.

D : A Linux server connected with an XSOAR server using SSH integration. Commands can be runremotely to access the mail server.

Answer: D

Free XSOAR-Engineer Mock Exam – Practice Online Confidently

Buying Options: