<< Prev Question Next Question >>

Question 28/65

To avoid exceeding API quotas for third-party services, indicators are only updated after the indicator cache expiration period. What is the default cache expiration period for indicators in XSOAR (minutes/days)?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (65q)
Question 1: An analyst runs the following command in a playbook task: !i...
Question 2: Which of the following does a XSOAR Admin need to create an ...
Question 3: An engineer would like to change an incident's SLA according...
Question 4: An engineer notices that playbooks only start once the user ...
Question 5: An engineer deployed two different instances of Active Direc...
Question 6: What is the default configuration for indicator auto-extract...
Question 7: When uploading content, which two options could the upload i...
Question 8: Which two statements describe how timers are configured to s...
Question 9: Which three types of information are displayed on the incide...
Question 10: Which two incident search queries are valid? (Choose two.)...
Question 11: What is the most effective way to correlate multiple raw eve...
Question 12: What is the correct definition regarding integration paramet...
Question 13: When mapping incoming data to incident fields, which stateme...
Question 14: Given an incident with three files, how could the name of th...
Question 15: What is the function of timer SLA fields in Cortex XSOAR?...
Question 16: Which tag must be applied to an Automation Script in order f...
Question 17: A SOC manager built a dashboard and would like to share the ...
Question 18: In Cortex XSOAR multi tenant setup, when content from a deve...
Question 19: An administrator wants to send an email via the Mail Sender ...
Question 20: What is the most effective way to correlate multiple raw eve...
Question 21: A SOC analyst needs to retrieve the list of all open phishin...
Question 22: Which two advanced attributes can be applied to incident fie...
Question 23: What are three different loop types in a playbook? (Choose t...
Question 24: Arrange these steps in the order that they occur during an i...
Question 25: What can be used as integration parameters?...
Question 26: When creating an incident layout section, it is best to plac...
Question 27: What is the default task type when creating an empty task?...
Question 28: To avoid exceeding API quotas for third-party services, indi...
Question 29: Who is permitted to create and submit content to the Marketp...
Question 30: After enriching a username using Active Directory, an engine...
Question 31: A playbook task generates a report as HTML in the context da...
Question 32: During the regular maintenance of XSOAR a customer noticed t...
Question 33: When mapping incoming data to incident fields, which stateme...
Question 34: Which two statements describe how timers are configured to s...
Question 35: Match the corresponding action with the appropriate playbook...
Question 36: Which two features does XSOAR offer to help recover from a s...
Question 37: An Engineer wants to filter a csvList value according to a d...
Question 38: What is a primary use case of data collection tasks?...
Question 39: At what stage during the incident lifecycle is an incident t...
Question 40: What happens if both a Classifier and Incident Type are conf...
Question 41: Match the operations with the appropriate context. (Exhibit)...
Question 42: In which two ways can data be transferred between playbooks ...
Question 43: Which three statements are true about the Marketplace? (Choo...
Question 44: Which three actions can an engineer take on the troubleshoot...
Question 45: Which of these would be the most operationally efficient rep...
Question 46: Which two situations would an engineer consider when configu...
Question 47: Match the appropriate action to the layout type. (Exhibit)...
Question 48: Which two methods are used to add new content to the XSOAR C...
Question 49: Which three support types are included in the Marketplace Co...
Question 50: An engineer deployed two different instances of Active Direc...
Question 51: Which method accesses a field called 'User Mail' in a playbo...
Question 52: An automation returned an output called: csvReport. What fil...
Question 53: By default, automation written in which language will be exe...
Question 54: Which two solutions are available to scale an overloaded XSO...
Question 55: An engineer asked for a specific command in an integration b...
Question 56: What does Script helper contain?...
Question 57: Which two causes may be occurring if an integration test is ...
Question 58: Which built-in automation/command cab be used to change an i...
Question 59: Match the operations with the appropriate context. (Exhibit)...
Question 60: What are the three ways to add/mark entries as evidence insi...
Question 61: Match the action with the most appropriate playbook task typ...
Question 62: Which two options may be added when a content pack is being ...
Question 63: A large number of incidents were deleted by mistake. Which t...
Question 64: Which content type cannot be managed using remote repositori...
Question 65: An administrator wants to run an automation in the War Room ...