An engineer would like to add a custom field to the New Job form for a job triggered from a threat intel feed. How would the engineer implement this?

The correct answer is B. The new job form can be edited from the Indicator Feed incident type editor. https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-threat-intel-management- guide/manage-indicators/understand-indicators/create-a-feed-based-job.html

Deployment and Configuration

Question

Options

AThe new job form changes based on the threat intel feed integration configuration
BThe new job form can be edited from the Indicator Feed incident type editor
CThe new job form for a threat intel feed job cannot be edited
DThe new job form can be edited from the threat intel feeds integration settings

How the community answered

(41 responses)

A
7% (3)
B
78% (32)
C
12% (5)
D
2% (1)

Explanation

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-threat-intel-management- guide/manage-indicators/understand-indicators/create-a-feed-based-job.html

Topics

#job forms#threat intel feeds#custom fields#incident types

Community Discussion

No community discussion yet for this question.

Full PCSAE Practice