Free XSOAR-Engineer Exam braindumps download (XSOAR-Engineer exam dumps Free)

QUESTION: 46

An engineer's organization system is registered in the following manner: <SiteName-SystemID- Username>. The engineer created a new indicator type for detecting systems using regex. The engineer would now like the username to be created as a separate `User' indicator automatically once a system is found.

What is the most efficient way for the engineer to achieve this?

Create a custom indicator field named `username' and link it to the internal system indicator
Change the reputation command for the internal system indicator type
Create a new indicator type of the internal username and set a formatting script to extract only the username
Create a new indicator type of the internal username and have the regex included on any string that has dash at the beginning

Answer(s): C

Reference:

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-threat-intel- management- guide/manage-indicators/understand-indicators/indicator-types/indicator-type- profile

Show Answer Next Question

QUESTION: 47

Which two options are the most effective for moving content between two environments? (Choose two.)

Remote repository based content sharing
UI based content import/export button
Copy the content backup from one environment file system (/var/lib/demisto/backup/content- backup-*) and move it to the other environment
Download the content items separately and upload them to the other environment

Answer(s): A,B

Reference:

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar- admin/manage-data/ migrate-data-to-another-server-for-multi-tenant.html

Show Answer Next Question

QUESTION: 48

Which three options can be defined in the layout settings? (Choose three.)

Set of fields to present
Permission to view the tab based on `Users'
Permission to view the tab based on `Roles'
Delete built-in tabs including the war room
Dynamic sections

Answer(s): A,C,E

Reference:

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoar-

admin/incidents/customize- incident-view-layouts/customize-incident-layouts.html

Show Answer Next Question