Free Palo Alto Networks XSOAR-Engineer Exam Dumps Questions & Answers

Which two functions in XSOAR are incident types used for? (Choose two.)

• A.  To run dedicated playbooks for different event types
• B.  To facilitate role based access to XSOAR incidents
• C.  To classify indicators extracted in XSOAR incidents to their respective types
• D.  To classify events ingested from various sources into the relevant types

You need to retrieve a list of all malicious hashes over the last 30 days. What is the correct query to use?

• A.  type:File verdict:Malicious sourcetimestamp:<="30 days ago"
• B.  type:File verdict:Malicious sourcetimestamp:>="30 days ago"
• C.  type:File reputation:Malicious sourcetimestamp:="30 days ago"
• D.  type:File reputation:Malicious sourcetimestamp:"30 days ago"

Which built-in automation/command cab be used to change an incident's type?

• A.  Set
• B.  setIncident
• C.  GetFieldsByIncidentType
• D.  modifyIncidentFields

Incidents need to be filtered by all of the following criteria:
1.Status - Pending
2.Exclude Category - Job
3.Severity - High
4.Owner - None (No owner assigned)
5.Type - Phishing
6.Email Subject - "You have won a million dollars"
What is the correct query syntax for the above incident search filter?

• A.  status=="Pending"andandcategory!="job"andandseverity=="High"andandowner=="None" andandtype=="Phishing"andandemailsubject=="You have won a million dollars"
• B.  status:Pending or -category:job or severity:High or owner:"" or type:Phishing or emailsubject:"You have won a million dollars"
• C.  status:Pending and -category:job and severity:High and owner:"" and type:Phishing and emailsubject:" You have won a million dollars"
• D.  Status:Pending and -Category:job and Severity:High and Owner:"" and Type:Phishing and Email Subject:You have won a million dollars

When browsing the Marketplace for new content packs, which details about each pack are you able to view?

• A.  The source code of each playbook
• B.  A test instance for the content pack
• C.  The integration's source code
• D.  A summary of each version history