What is the most effective way to correlate multiple raw events coming from a SIEM and link them together?

• A.Ingest all raw events, run a custom script to find the relationship between them and proceed to link them together
• B.Configure a pre-process rule to link related events as they are ingested
• C.Manually go through the incidents created by the raw events and link related incidents
• D.Process all alerts by running the respective playbook and link related incidents during post-processing

Comment: *

Name: *

Email: *

Verification: *

An engineer defined a dashboard which allows important metrics to be displayed. The engineer would like to make this dashboard the default dashboard.
How can it be accomplished?

• A.Right click on the dashboard tab and 'Set as Default'
• B.Use the server configuration key: default.dashboards
• C.Save the dashboard as a widget and apply it to all users
• D.Default Dashboard can be defined by 'Role'

Comment: *

Name: *

Email: *

Verification: *

An engineer asked for a specific command in an integration but the capability does not exist. The engineer decided to edit the existing integration by copying the integration and adding the needed commands.
What is the main concern when adding these commands?

• A.The custom integration will not be maintained and updated by XSOAR content team
• B.The commands must return a proper result to the war room for the analysts to understand
• C.The code may not be written to XSOAR standards
• D.The integrations are locked and cannot be edited with additional commands

Comment: *

Name: *

Email: *

Verification: *

What is the correct definition regarding integration parameters and command arguments?

• A.Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command.
• B.Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command.
• C.Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command.
• D.Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command.

Comment: *

Name: *

Email: *

Verification: *

An engineer notices that playbooks only start once the user clicks the 'investigate' button and he/she would like the playbook to start automatically.
How can this be implemented?

• A.Add the !startinvestigation automation to the beginning of the playbook
• B.Select 'Run playbook automatically' from the integration settings
• C.Add the playbook to the integration's settings
• D.Select 'Run playbook automatically' from the incident type settings

Comment: *

Name: *

Email: *

Verification: *