At what stage during the incident lifecycle is an incident type assigned?

• A.Playbook execution
• B.Incident creation
• C.Pre-processing
• D.Classification

Comment: *

Name: *

Email: *

Verification: *

Arrange these steps in the order that they occur during an incident fetch.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

The default expiration method for non-feed indicators is either to never expire or to expire after a specific period of time. How frequently does XSOAR check tor newly expired indicators?

• A.Every 8 hours
• B.Every 24 hours
• C.Every 5 minutes
• D.Every 1 hour

Comment: *

Name: *

Email: *

Verification: *

When is the post-processing script executed in XSOAR?

• A.Just after the playbook is executed
• B.Just after the pre-processing is executed
• C.Just after the incident is created
• D.Just after the Close Incident button is clicked

Comment: *

Name: *

Email: *

Verification: *

An analyst runs the following command in a playbook task:
!ip ip=1.1.1.1
Which extraction mode needs to be enabled on the Advanced tab of the playbook task to synchronously extract indicators from the results of this command?

• A.Out of band
• B.Inline
• C.Extract
• D.Synchronous

Comment: *

Name: *

Email: *

Verification: *