Palo Alto Networks XSOAR-Engineer - Palo Alto Networks XSOAR Engineer Exam
Page: 3 / 10
Total 50 questions
Question #11 (Topic: Exam A)
A breakpoint is added to a saved playbook to ensure that it pauses before running the task "ad-delete-user." However, it is later discovered that an Active Directory account was deleted by this playbook, and the playbook did not pause at the breakpoint.
What is the cause of this issue?
What is the cause of this issue?
A. The playbook does not stop at the breakpoint when run from an incident.
B. The task was not set to "skip."
C. The task was not configured to override input.
D. The playbook was not set to "quiet mode."
Answer: A
Question #12 (Topic: Exam A)
What is the result of an indicator being marked as expired?
A. It still exists and can be searched.
B. It is immediately deleted from the database.
C. It still exists but is not searchable.
D. It is deleted from the database after seven days.
Answer: A
Question #13 (Topic: Exam A)
When the "Only allow these dashboards" checkbox is selected for a user role, what is the primary effect on users assigned this role?
A. They are prompted to select their preferred dashboards upon login and can only modify these chosen dashboards.
B. They can only view specified dashboards and make minor modifications.
C. They will automatically have all dashboards that are shared with them added to their view.
D. They will be restricted to viewing only the specified default dashboards and cannot make any modifications.
Answer: D
Question #14 (Topic: Exam A)
What must happen before a pre-process rule can be applied to a potential incident?
A. Mapping
B. Playbook execution
C. Ingestion
D. Classification
Answer: D
Question #15 (Topic: Exam A)
Which set of trigger options is available to start a job when a new instance is created?
A. "Mapping" and "Classification"
B. "Time" and "By delta in feed"
C. "Cron View" and "Human View"
D. "Script Start" and "CLI"
Answer: B
