XSOAR-ENGINEER · Question #55
A task must repeat every hour until a threat score drops below 20. Which feature supports this?
The correct answer is D. Loop with "until" condition. Option D is correct because a "Loop with 'until' condition" is specifically designed for scenarios where a task must execute repeatedly and check a dynamic condition between iterations - exactly matching the requirement of running hourly until a threshold (threat score < 20) is…
Question
A task must repeat every hour until a threat score drops below 20. Which feature supports this?
Options
- AScheduled jobs
- BBuilt-in enrichment script
- CTask SLA
- DLoop with "until" condition
How the community answered
(24 responses)- A17% (4)
- B4% (1)
- C4% (1)
- D75% (18)
Explanation
Option D is correct because a "Loop with 'until' condition" is specifically designed for scenarios where a task must execute repeatedly and check a dynamic condition between iterations - exactly matching the requirement of running hourly until a threshold (threat score < 20) is met.
Why the distractors are wrong:
- A (Scheduled jobs) run on a fixed schedule but don't natively support conditional termination - they keep running regardless of any changing state.
- B (Built-in enrichment script) is for augmenting data with additional context (e.g., threat intel lookups), not for controlling task repetition logic.
- C (Task SLA) defines time-based performance expectations or deadlines for task completion, not a mechanism for conditional looping.
Memory tip: Think of the phrase "loop until done" - whenever a question involves repetition plus a stopping condition based on a changing value, the answer is always the loop construct with an until clause. Scheduled jobs are "set and forget"; loops are "run and check."
Topics
Community Discussion
No community discussion yet for this question.