nerdexam
Palo_Alto_Networks

XSOAR-ENGINEER · Question #17

A playbook needs to dynamically add an email sender's address to a Cortex XSOAR list named "BlockedSenders_Email." Which built-in command should be used within the playbook to add this email address…

The correct answer is A. !addToList listName="BlockedSenders_Email" listData="<email_address>". The built-in command !addToList is used in Cortex XSOAR to add items dynamically to an existing list. In this case, it will insert the sender's email address into the list BlockedSenders_Email, ensuring the value is appended without overwriting the entire list.

Playbook Development and Automation

Question

A playbook needs to dynamically add an email sender's address to a Cortex XSOAR list named "BlockedSenders_Email." Which built-in command should be used within the playbook to add this email address to the specified list?

Options

  • A!addToList listName="BlockedSenders_Email" listData="<email_address>"
  • B!appendToListContext listPath="BlockedSenders Email" data="<email_address>"
  • C!setIncident list.BlockedSenders_Emai1="<email_address>"
  • D!createListItem listName="BlockedSenders_Email" itemValue="<email_address>"

How the community answered

(57 responses)
  • A
    89% (51)
  • B
    5% (3)
  • C
    4% (2)
  • D
    2% (1)

Explanation

The built-in command !addToList is used in Cortex XSOAR to add items dynamically to an existing list. In this case, it will insert the sender's email address into the list BlockedSenders_Email, ensuring the value is appended without overwriting the entire list.

Topics

#addToList command#XSOAR lists#built-in commands#playbook automation

Community Discussion

No community discussion yet for this question.

Full XSOAR-ENGINEER Practice