nerdexam
Palo_Alto_Networks

XSOAR-ENGINEER · Question #12

An engineer adds a new "Forensics" tab that includes several sections for detailed artifact analysis to the "Malware Incident" layout. However, junior analysts report they cannot see this tab, while…

The correct answer is D. A display filter was applied to the tab in the layout editor. In XSOAR, visibility of tabs in an incident layout can be restricted using display filters. If the "Forensics" tab is only visible to senior analysts but hidden from junior analysts, the most likely cause is that a display filter was applied, limiting its visibility based on…

Incident Layout and Customization

Question

An engineer adds a new "Forensics" tab that includes several sections for detailed artifact analysis to the "Malware Incident" layout. However, junior analysts report they cannot see this tab, while senior analysts can. Which configuration setting is the most likely reason for this discrepancy?

Options

  • AThe underlying fields within the tab sections was incorrectly mapped.
  • BThe tab was not added to the junior analyst role group.
  • CThe tab was marked as read-only in the layout configuration for the junior analyst roles.
  • DA display filter was applied to the tab in the layout editor.

How the community answered

(54 responses)
  • A
    17% (9)
  • B
    7% (4)
  • C
    30% (16)
  • D
    46% (25)

Explanation

In XSOAR, visibility of tabs in an incident layout can be restricted using display filters. If the "Forensics" tab is only visible to senior analysts but hidden from junior analysts, the most likely cause is that a display filter was applied, limiting its visibility based on role or conditions.

Topics

#display filters#layout tabs#role-based visibility#incident layout

Community Discussion

No community discussion yet for this question.

Full XSOAR-ENGINEER Practice