Free Palo Alto Networks XSOAR-Engineer Exam Dumps Questions & Answers

A SOC team must send a notification email to specific teams based on the severity of an incident.
Which feature will accomplish this task each time the severity escalates?.

• A.  Server config.
• B.  Field-change trigger script.
• C.  SLA script.
• D.  Post-processing rule.

If a known malicious domain is no longer associated with a specific IP address, which action will make the association inactive?.

• A.  Update the indicator relationship description.
• B.  Expire the IP address indicator.
• C.  Revoke the relationship.
• D.  Update the relationship type.

Based on the integration and classifier configuration images below,

which incident type will be created for incidents ingested using this integration when the incoming "type" field is set to "url allowed"?.

• A.  Case.
• B.  Access.
• C.  XSOAR ENGINEER- URL Alerts.
• D.  URL Allowed.

Which two situations would an engineer consider when configuring classification and mapping for an incident type? (Choose two.)

• A.  When manually creating an incident from the UI
• B.  When adding a new analyst account to XSOAR
• C.  When creating incidents from the XSOAR REST API
• D.  When fetching many different incident types from a single mailbox

Which two statements describe how timers are configured to start and stop automatically in a playbook?
(Choose two.)

• A.  To begin counting time taken, add a task in the playbook with automation startTimer. To end the counting, add a task with automation stopTimer
• B.  After the playbook has run, calculate the total time taken and set the timer field with this value
• C.  From the Timers tab of the playbook task, choose the action for the timer and the timer field to perform the action on
• D.  Use a field of Number to count the number of seconds elapsed between two tasks