Online Access Free XSOAR-Engineer Exam Questions

What is the correct way to install different engines on the same Ubuntu machine for a Dev/Prod setup?.

• A.Use different docker instances in the machine to install each engine.
• B.Use Shell installer and create a custom JSON configuration file.
• C.Create a DEB installer and modify in the JSON configuration.
• D.Use Shell installer with "Allow running multiple engines.".

Which two methods will allow data to be saved in incident fields within a playbook? (Choose two.)

• A.setIncident
• B.Field mapping
• C.Layout inline editing
• D.setFields

After enriching a username using Active Directory, an engineer would like to send an email to the user's manager. However, this functionality is not part of the command output. The engineer checks with raw- response=true and notices that the manager's email is returned, but not saved in the context.
How can the engineer save the data so it will be accessible?

• A.Use raw-response = save
• B.Use extend-context
• C.Mark ignore input = true
• D.Mark ignore output = true

An incident field is created having the display name as Source_IP. How can the field be accessed?

• A.${incident.Source_IP}
• B.${incident.srcip}
• C.${incident.Source IP}
• D.${incident.sourceip}

When creating a new tab in the layout, which section cannot be added?

• A.Incident team members
• B.Related incidents
• C.Retrieve widget chart based on script
• D.War room entries picked by entry query