XSOAR-Engineer問題集、Palo Alto Networks実際の試験問題

質問 1

When creating an incident layout section, it is best to place long field values within which of the following?

A. Section headers

B. Rows

C. Cards

D. Canvas

正解: B

質問 2

An engineer's organization system is registered in the following manner: <SiteName-SystemID- Username>.
The engineer created a new indicator type for detecting systems using regex. The engineer would now like the username to be created as a separate 'User' indicator automatically once a system is found.
What is the most efficient way for the engineer to achieve this?

A. Create a new indicator type of the internal username and have the regex included on any string that has dash at the beginning

B. Change the reputation command for the internal system indicator type

C. Create a custom indicator field named 'username' and link it to the internal system indicator

D. Create a new indicator type of the internal username and set a formatting script to extract only theusername

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 3

An engineer wants to save a command output to a custom context key using "Extend Context" in a playbook task. To do this, the engineer needs the full context path of the command's output.
Which common CLI argument or flag can help identify this full output and its correct path?.

A. raw-response.

B. extend-parent-context.

C. auto extract.

D. debug-mode.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which two causes may be occurring if an integration test is working, but the integration is not fetching incidents? (Choose two.)

A. It can take up to 1-hour before incidents are initially fetched

B. The 'Fetches Incidents' option may not have been enabled

C. There are no new events from the external service

D. The first fetch should be manually triggered to start the fetching process

正解: B,C

質問 5

An engineer would like to present a trend using widgets to compare to a previous week's data. Which two methods will allow the engineer to meet the requirement? (Choose two.)

A. Create a custom widget using a script

B. Create widget of type Number, check 'Display Trend' and define as 7 days ago

C. Create a custom widget using a new incident query

D. Create widget of type Line, check 'Display Trend' and define as 7 days ago

正解: A,D

質問 6

Which development languages are supported when creating XSOAR automation scripts?

A. Javascript, Powershell, C++

B. Ruby, C++, Python

C. C++, Python, Powershell

D. Python, Powershell, Javascript

正解: D

質問 7

Where do you navigate to monitor and improve the system performance and resilience for hosts in a multitenant environment?

A. Settings > Advanced > System Diagnostics, in the main host account. Each host has a System Diagnostics page.

B. Settings > Account Management > Hosts, in the main host account. Each host has a System Diagnostics page.

C. Settings > About > System Diagnostics, in the main host account. Each host has a System Diagnostics page.

D. Settings > About > Troubleshooting, in the main host account. Each host has a System Diagnostics page.

正解: C

質問 8

Which two statements describe how timers are configured to start and stop automatically in a playbook?
(Choose two.)

A. To begin counting time taken, add a task in the playbook with automation startTimer. To end the counting, add a task with automation stopTimer

B. After the playbook has run, calculate the total time taken and set the timer field with this value

C. From the Timers tab of the playbook task, choose the action for the timer and the timer field to perform the action on

D. Use a field of Number to count the number of seconds elapsed between two tasks

正解: A,C

質問 9

Given the following context data, what would be the expected output of the expression?

A. 1E56733826E5035233A097FCEA2046AF96EC616C

B. e6ef5142e2553c1e442a0ffac07636eac61e6edd

C. 8D193FA162A305E4859BA8C45F5121F7265E3ABB

D. E6EF5142E2553C1E442A0FFAC07636EAC61E6EDD

正解: B

Palo Alto Networks XSOAR Engineer - XSOAR-Engineer 模擬練習