Question 1

An engineer’s organization system is registered in the following manner: .The engineer created a new indicator type for detecting systems using regex. The engineer would now like theusername to be created as a separate ‘User’ indicator automatically once a system is found.What is the most efficient way for the engineer to achieve this?

Options :

A : Create a custom indicator field named ‘username’ and link it to the internal system indicator

B : Change the reputation command for the internal system indicator type

C : Create a new indicator type of the internal username and set a formatting script to extract only theusername

D : Create a new indicator type of the internal username and have the regex included on any string that hasdash at the beginning

Answer: C

Question 2

What is an example of a generic reputation command?

Options :

A : !ip

B : !getReputation

C : !reputation

D : !enrichIndicaton

Answer: C

Question 3

Which two statements accurately describe layouts? (Choose two.)

Options :

A : Layouts override classification and mapping

B : New tabs can be added to the incident layout

C : Layouts can display incident information and custom fields

D : Layouts add or remove custom fields from an incident type

Answer: B,C

Question 4

An organization has recently acquired another company as its subsidiary. The subsidiary has its infrastructureon AWS cloud as illustrated in the image below:The organization wants to use the mail server location on the subsidiary's cloud to send emails. Withoutacquiring additional licenses, which XSOAR component can fulfill the requirement?

Options :

A : XSOAR D2 Agents, to send the required emails.

B : An XSOAR engine that is downloaded from the XSOAR server and installed within the subsidiary.

C : Another XSOAR server that uses the same license as their primary XSOAR server.

D : A Linux server connected with an XSOAR server using SSH integration. Commands can be runremotely to access the mail server.

Answer: D

Question 5

Which two methods are used to add new content to the XSOAR Content Repository? (Choose two.)

Options :

A : Create content and add it to the standard content by contributing through the Marketplace

B : Use the XSOAR GitHub Contribution Guide to add the contribution to the standard content

C : Create a support ticket with the custom content for review by the support team

D : Any custom content will be automatically uploaded to the content repository

Answer: A,D

Confidently Practice Online with Free XSOAR-Engineer Exam Cram

Buying Options: