最新的Palo Alto Networks XSOAR Engineer - XSOAR-Engineer免費考試真題
To avoid exceeding API quotas for third-party services, indicators are only updated after the indicator cache expiration period. What is the default cache expiration period for indicators in XSOAR (minutes/days)?
正確答案: A
說明：（僅 Fast2test 成員可見）
An analyst wants to run a script to remove usernames from an incident before the incident becomes active in XSOAR. How can this be achieved?
正確答案: A
說明：（僅 Fast2test 成員可見）
Based on the image below, what will be the type of this new incident?.
正確答案: A
What is an example of a generic reputation command?
正確答案: B
The code snippet below is from the fetch command of an integration instance configured to run on the server.
demisto.debug(f"(len(incidents)} events fetched")
Where is the output from the snippet located when the instance runs an automatic fetch?.
demisto.debug(f"(len(incidents)} events fetched")
Where is the output from the snippet located when the instance runs an automatic fetch?.
正確答案: A
說明：（僅 Fast2test 成員可見）
What is the unique identifier for a note in the incident War Room?.
正確答案: B
說明：（僅 Fast2test 成員可見）
Multiple company assets were reported by vulnerability scanners as being vulnerable to CVE-2017-11882.
This vulnerability affects applications installed on workstations. The SOC team needs to take action and apply the new vulnerability patch that was just released. The team must first create a cause for each of the identified assets in ServiceNow IT Service Management (ITSM), in order to notify the IT department. Next, the team creates a task in the main playbook, which extracts the list of assets from the scanner report.
After the list of assets are created, what are the two solutions that the SOC team could take so that a case could be created and a patch installed? (Choose two.)
This vulnerability affects applications installed on workstations. The SOC team needs to take action and apply the new vulnerability patch that was just released. The team must first create a cause for each of the identified assets in ServiceNow IT Service Management (ITSM), in order to notify the IT department. Next, the team creates a task in the main playbook, which extracts the list of assets from the scanner report.
After the list of assets are created, what are the two solutions that the SOC team could take so that a case could be created and a patch installed? (Choose two.)
正確答案: B,D
Which two advanced attributes can be applied to incident fields when editing? (Choose two.)
正確答案: C,D
說明：（僅 Fast2test 成員可見）
Which two methods are used to add new content to the XSOAR Content Repository? (Choose two.)
正確答案: A,C
When browsing the Marketplace for new content packs, which details about each pack are you able to view?
正確答案: B
An incident has been created in the following state:
There is no playbook attached.
The War Room is available, but no commands have been run yet.
What is the status of the incident?.
There is no playbook attached.
The War Room is available, but no commands have been run yet.
What is the status of the incident?.
正確答案: A
說明：（僅 Fast2test 成員可見）
How long is the trial period for paid content packs?
正確答案: D
說明：（僅 Fast2test 成員可見）