Question 1

An engineer’s organization system is registered in the following manner: .The engineer created a new indicator type for detecting systems using regex. The engineer would now like theusername to be created as a separate ‘User’ indicator automatically once a system is found.What is the most efficient way for the engineer to achieve this?

Options :

A : Create a custom indicator field named ‘username’ and link it to the internal system indicator

B : Change the reputation command for the internal system indicator type

C : Create a new indicator type of the internal username and set a formatting script to extract only theusername

D : Create a new indicator type of the internal username and have the regex included on any string that hasdash at the beginning

Answer: C

Question 2

Which two statements accurately describe layouts? (Choose two.)

Options :

A : Layouts override classification and mapping

B : New tabs can be added to the incident layout

C : Layouts can display incident information and custom fields

D : Layouts add or remove custom fields from an incident type

Answer: B,C

Question 3

A SOC manager built a dashboard and would like to share the dashboard with other team members. Howwould the SOC manager create a dashboard that meets this requirement?

Options :

A : Manually share the dashboard through user emails

B : Dashboard is shared to all XSOAR users

C : Propagate the dashboard based on SAML authentication

D : Dashboard is shared to all XSOAR users in a selected role

Answer: D

Question 4

Which two methods will allow data to be saved in incident fields within a playbook? (Choose two.)

Options :

A : setFields

B : Field mapping

C : setIncident

D : Layout inline editing

Answer: B,C

Question 5

Which option is available in XSOAR to create the body of a Threat Intel Report?

Options :

A : Markdown

B : Grid Fields

C : DOC format

D : Javascript

Answer: A

Higher Test Marks with Free Online XSOAR-Engineer Exam Practice

Buying Options: