- All Exams Instant Download
When mapping incoming data to incident fields, which statement is correct?
When mapping incoming data to incident fields, which statement is correct?A . Data that is not mapped is placed under labels B. Only text fields are classified C. Classification cannot be used if mapping is enabled D. Every incoming field must be mappedView AnswerAnswer: A Explanation: Reference: https://xsoar.pan.dev/docs/incidents/incident-classification-mapping
Which of the following out of the box methods would be used for that?
An administrator wants to send an email via the Mail Sender integration. Which of the following out of the box methods would be used for that?A . XSOAR D2 agent B. external integration command C. XSOAR shared agent D. common automation scriptView AnswerAnswer: B
How can the engineer populate the HTML field in the indicator layout?
A playbook task generates a report as HTML in the context data. An engineer creates a custom indicator field of type "HTML" and adds the field to a section in a custom indicator layout. How can the engineer populate the HTML field in the indicator layout?A . Populate the custom...
What are two common use cases for conditional tasks? (Choose two.)
What are two common use cases for conditional tasks? (Choose two.)A . They are used for branching paths in a playbook B. They are used to interact with users through survey functionality C. They are used to determine which incident will be executed D. They are used for sending a...
Which three actions can an engineer take on the troubleshooting page? (Choose three.)
Which three actions can an engineer take on the troubleshooting page? (Choose three.) A . Download the debug log bundle B. Put the XSOAR server in maintenance mode C. View and modify server configuration settings D. Export and import custom content E. View a list of server administratorsView AnswerAnswer: A,B,C
Where can engineers add the post-processing scripts to incidents?
Where can engineers add the post-processing scripts to incidents?A . The post-processing tag must be added to the automation B. Post-processing scripts must be added at the end of playbooks C. Post-processing scripts must be added from the Incident Type editor D. Post-processing scripts must be added from the Post-Process...
Which two methods are used to add new content to the XSOAR Content Repository? (Choose two.)
Which two methods are used to add new content to the XSOAR Content Repository? (Choose two.)A . Create content and add it to the standard content by contributing through the Marketplace B. Use the XSOAR GitHub Contribution Guide to add the contribution to the standard content C. Create a support...
How can this be achieved?
The XSOAR administrator is writing an automation and would like to return an error entry back into XSOAR if a particular command errors out. How can this be achieved?A . Using the demisto_error() function B. Using a print statement C. Using the demisto.debug() function D. Using the return_error() functionView AnswerAnswer:...
Which two statements accurately describe layouts? (Choose two.)
Which two statements accurately describe layouts? (Choose two.)A . Layouts override classification and mapping B. New tabs can be added to the incident layout C. Layouts can display incident information and custom fields D. Layouts add or remove custom fields from an incident typeView AnswerAnswer: B,C
What is the correct query syntax for the above incident search filter?
Email Subject C “You have won a million dollars” What is the correct query syntax for the above incident search filter?A . status==“Pending“ && category!=”job” && severity==”High” && owner==”None” && type==”Phishing” && emailsubject==”You have won a million dollars” B. Status:Pending and CCategory:job and Severity:High and Owner:”” and Type:Phishing and Email...
