XSOAR-ENGINEER Exam Questions
60 real XSOAR-ENGINEER exam questions with expert-verified answers and explanations. Page 2 of 2.
- Question #51Cortex XSOAR Architecture and Deployment
When planning a Cortex XSOAR engine deployment, which factor is most important?
XSOAR enginedeployment planningnetwork proximityintegration connectivity - Question #52Cortex XSOAR Architecture and Deployment
Which two tasks are essential when planning a dev/prod XSOAR deployment? (Choose two)
dev/prod deploymentcontent promotion workflowpack dependenciesXSOAR architecture - Question #53Playbook Development
An engineer needs to reference a deeply nested value in a JSON object. Which element enables this?
context pathsdot notationJSON parsingdata access - Question #54Threat Intelligence Management
Which two enrichment steps can be performed using built-in threat intelligence commands? (Choose two)
threat intelligence commandsWHOIS enrichmentURL reputationbuilt-in enrichment - Question #55Playbook Development
A task must repeat every hour until a threat score drops below 20. Which feature supports this?
playbook loopsloop until conditiontask repetitionplaybook flow control - Question #56Playbook Development
What is the purpose of the playbook debugger during development?
playbook debuggerdevelopment toolscontext inspectionplaybook testing - Question #57Threat Intelligence Management
Which two relationships are commonly auto-generated during enrichment? (Choose two)
indicator relationshipsenrichmentIP to domainfile hash to malware - Question #58Incident Management
A SOC wants to store custom watchlist values used across playbooks. Which XSOAR feature supports this?
XSOAR Listsshared data storagewatchlistcross-playbook data - Question #59Playbook Development
Which two actions can be performed using filters and transformers within a playbook task? (Choose two)
filterstransformersplaybook tasksdata manipulation - Question #60Incident Management
If analysts want to remove sensitive command outputs from a final report, which action should be performed?
War Room entriesevidence managemententry visibilityreport generation