報名費並不便宜，沒有人想為 XSOAR-Engineer 付第二次考試費。與其抱著僥倖上考場，不如先用 Fast2test 的 206 道練習題徹底檢驗實力，爭取一次就把 Palo Alto Networks XSOAR Engineer 考到手。

Palo Alto Networks XSOAR-Engineer 考試概覽:

Palo Alto Networks XSOAR-Engineer 考試大綱主題:

Palo Alto Networks XSOAR Engineer 考生最常問的問題

最新的 Security Operations XSOAR-Engineer 免費考試真題：

問題 #1

Which of the following is a feature of XSOAR automations?

A. can be written in C++
B. can be password protected
C. can run on multiple docker containers
D. can be set to run on a scheduled basis in the automation settings

問題 #2

An engineer notices that playbooks only start once the user clicks the 'investigate' button and he/she would like the playbook to start automatically.
How can this be implemented?

A. Select 'Run playbook automatically' from the integration settings
B. Select 'Run playbook automatically' from the incident type settings
C. Add the !startinvestigation automation to the beginning of the playbook
D. Add the playbook to the integration's settings

問題 #3

What is the default configuration for indicator auto-extraction when incidents are created?

A. None
B. Inband
C. Out of band
D. Inline

問題 #4

Multiple company assets were reported by vulnerability scanners as being vulnerable to CVE-2017-11882.
This vulnerability affects applications installed on workstations. The SOC team needs to take action and apply the new vulnerability patch that was just released. The team must first create a cause for each of the identified assets in ServiceNow IT Service Management (ITSM), in order to notify the IT department. Next, the team creates a task in the main playbook, which extracts the list of assets from the scanner report.
After the list of assets are created, what are the two solutions that the SOC team could take so that a case could be created and a patch installed? (Choose two.)

A. Set a key for storing the iteration number and create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Exit condition: iterator contains the count of the number of items in the list) and perform the following tasks:-Active Directory User Enrichment based on the computerName-Create the ServiceNow Record by adding the enrichment information-Mark the ticket severity as Urgent
B. Set a key for storing the iteration number and create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Exit condition: iterator equal to count of the number of item in the list) and perform the following tasks:-Increase the iterator value by one each time-Active Directory User Enrichment based on the computerName-Create the ServiceNow Record by adding the enrichment information-Mark the ticket severity as Urgent
C. Create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Condition: AreValuesEqual - Exit on yes - left:1, right 1) and perform the following tasks:-Active Directory User Enrichment based on the computerName-Create the ServiceNow Record by adding the enrichment information-Mark the ticket severity as Urgent
D. Create a sub-playbook with a single input containing the computer names that will loop 'For Each Input' and perform the following tasks:-Active Directory User Enrichment based on the computerName- Create the ServiceNow Record by adding the enrichment information-Mark the ticket severity as Urgent

問題 #5

A breakpoint is added to a saved playbook to ensure that it pauses before running the task "ad-delete-user." However, it is later discovered that an Active Directory account was deleted by this playbook, and the playbook did not pause at the breakpoint.
What is the cause of this issue?.

A. The playbook does not stop at the breakpoint when run from an incident.
B. The task was not configured to override input.
C. The playbook was not set to "quiet mode.".
D. The task was not set to "skip.".

問題與答案：