Free Palo Alto Networks XSOAR-Engineer Exam Dumps Questions & Answers

Which of the following are valid methods to contribute custom content? (Choose three.)

• A.  A Github pull request on the public XSOAR Content Repository
• B.  Using the content submission tool on live.paloaltonetworks.com
• C.  Submit content directly through feature requests
• D.  Private GitHub repository submission for premium content
• E.  Using the marketplace interface to upload the content

An engineer is developing a playbook that will be run multiple times for testing purposes. What is the recommended first task to be used in the playbook?

• A.  GenerateTest
• B.  DeleteContext
• C.  SetContext
• D.  PrintContext

The code snippet below is from the fetch command of an integration instance configured to run on the server.
demisto.debug(f"(len(incidents)} events fetched")
Where is the output from the snippet located when the instance runs an automatic fetch?.

• A.  Incident label.
• B.  Platform Log bundle.
• C.  Integration Logs table.
• D.  War Room entry.

Multiple company assets were reported by vulnerability scanners as being vulnerable to CVE-2017-11882.
This vulnerability affects applications installed on workstations. The SOC team needs to take action and apply the new vulnerability patch that was just released. The team must first create a cause for each of the identified assets in ServiceNow IT Service Management (ITSM), in order to notify the IT department. Next, the team creates a task in the main playbook, which extracts the list of assets from the scanner report.
After the list of assets are created, what are the two solutions that the SOC team could take so that a case could be created and a patch installed? (Choose two.)

• A.  Create a sub-playbook with a single input containing the computer names that will loop 'For Each Input' and perform the following tasks:-Active Directory User Enrichment based on the computerName- Create the ServiceNow Record by adding the enrichment information-Mark the ticket severity as Urgent
• B.  Set a key for storing the iteration number and create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Exit condition: iterator contains the count of the number of items in the list) and perform the following tasks:-Active Directory User Enrichment based on the computerName-Create the ServiceNow Record by adding the enrichment information-Mark the ticket severity as Urgent
• C.  Set a key for storing the iteration number and create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Exit condition: iterator equal to count of the number of item in the list) and perform the following tasks:-Increase the iterator value by one each time-Active Directory User Enrichment based on the computerName-Create the ServiceNow Record by adding the enrichment information-Mark the ticket severity as Urgent
• D.  Create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Condition: AreValuesEqual - Exit on yes - left:1, right 1) and perform the following tasks:-Active Directory User Enrichment based on the computerName-Create the ServiceNow Record by adding the enrichment information-Mark the ticket severity as Urgent

An engineer adds a new "Forensics" tab that includes several sections for detailed artifact analysis to the
"Malware Incident" layout. However, junior analysts report they cannot see this tab, while senior analysts can.
Which configuration setting is the most likely reason for this discrepancy?.

• A.  The underlying fields within the tab sections was incorrectly mapped.
• B.  The tab was marked as read-only in the layout configuration for the junior analyst roles.
• C.  A display filter was applied to the tab in the layout editor.
• D.  The tab was not added to the junior analyst role group.