Online Access Free XSOAR-Engineer Exam Questions

What is an outcome of using sections within a tab when customizing an incident layout?.

• A.Restricting access to sensitive fields based on user roles, ensuring data privacy within the specific incident type.
• B.Triggering specific automations or playbooks when data within that section is modified during an investigation.
• C.Grouping related fields and information logically, improving readability and data entry efficiency.
• D.Enforcing mandatory fields that must be completed before an incident can be closed.

A playbook needs to dynamically add an email sender's address to a Cortex XSOAR list named
"BlockedSenders_Email."
Which built-in command should be used within the playbook to add this email address to the specified list?.

• A.!appendToListContext listPath="BlockedSenders Email" data="<email_address>".
• B.!createListItem listName="BlockedSenders_Email" itemValue="<email_address>".
• C.!setIncident list.BlockedSenders_Emai1="<email_address>".
• D.!addToList listName="BlockedSenders_Email" listData="<email_address>".

Which set of trigger options is available to start a job when a new instance is created?.

• A."Cron View" and "Human View"
• B."Script Start" and "CLI"
• C."Mapping" and "Classification"
• D."Time" and "By delta in feed"

Which two input requirements are needed to train a machine learning model? (Choose two.)

• A.Verdict Label
• B.Incident Type
• C.Incident Field
• D.3000 Incidents

What aggregates data from incidents and indicators into a Cortex XSOAR report?.

• A.Automations.
• B.Widgets.
• C.SQL queries.
• D.Playbooks.