Question 1

Which option is available in XSOAR to create the body of a Threat Intel Report?

Options :

A : Markdown

B : Grid Fields

C : DOC format

D : Javascript

Answer: A

Question 2

Which two methods are used to add new content to the XSOAR Content Repository? (Choose two.)

Options :

A : Create content and add it to the standard content by contributing through the Marketplace

B : Use the XSOAR GitHub Contribution Guide to add the contribution to the standard content

C : Create a support ticket with the custom content for review by the support team

D : Any custom content will be automatically uploaded to the content repository

Answer: A,D

Question 3

An engineer would like to change an incident’s SLA according to the severity field changes. How can theengineer achieve this task?

Options :

A : Use a field trigger script

B : Use a field display script

C : Create a job that queries for incident severity changes

D : Change the SLA manually every time the severity changes

Answer: A

Question 4

What is the default landing page for a new user in XSOAR?

Options :

A : Dashboards

B : Threat Intel

C : Settings

D : Marketplace

Answer: A

Question 5

An engineer’s organization system is registered in the following manner: .The engineer created a new indicator type for detecting systems using regex. The engineer would now like theusername to be created as a separate ‘User’ indicator automatically once a system is found.What is the most efficient way for the engineer to achieve this?

Options :

A : Create a custom indicator field named ‘username’ and link it to the internal system indicator

B : Change the reputation command for the internal system indicator type

C : Create a new indicator type of the internal username and set a formatting script to extract only theusername

D : Create a new indicator type of the internal username and have the regex included on any string that hasdash at the beginning

Answer: C

Free XSOAR-Engineer Mock Exam – Practice Online Confidently

Buying Options: