Palo_Alto_Networks
PCSAE · Question #106
A playbook task generates a report as HTML in the context data. An engineer creates a custom indicator field of type "HTML" and adds the field to a section in a custom indicator layout. How can the…
The correct answer is D. Use the Mapping option in the playbook task that generates the HTML report to populate the. https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.8/Cortex-XSOAR-Threat-Intel- Management-Guide/Map-Custom-Indicator-Fields
Playbook Design and Development
Question
A playbook task generates a report as HTML in the context data. An engineer creates a custom indicator field of type "HTML" and adds the field to a section in a custom indicator layout. How can the engineer populate the HTML field in the indicator layout?
Options
- APopulate the custom indicator field with the built-in !SetIndicator command.
- BAdd HTML to a list using !setList and use it as an HTML template to populate the custom indicator
- CCreate a custom Indicator Mapper and populate the custom indicator field.
- DUse the Mapping option in the playbook task that generates the HTML report to populate the
How the community answered
(53 responses)- A8% (4)
- B13% (7)
- C4% (2)
- D75% (40)
Explanation
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.8/Cortex-XSOAR-Threat-Intel- Management-Guide/Map-Custom-Indicator-Fields
Topics
#indicator layout#HTML field#task output mapping#context data
Community Discussion
No community discussion yet for this question.