An engineer would like to present a trend using widgets to compare to a previous week’s data. Which two methods will allow the engineer to meet the requirement? (Choose two.) A. Create widget of type Line, check ‘Display Trend’ and define as 7 days ago B. Create a custom widget using a new incident query […]

Where can engineers add the post-processing scripts to incidents? A. The post-processing tag must be added to the automation B. Post-processing scripts must be added at the end of playbooks C. Post-processing scripts must be added from the Incident Type editor D. Post-processing scripts must be added from the Post-Process Rules editor

After enriching a username using Active Directory, an engineer would like to send an email to the user’s manager. However, this functionality is not part of the command output. The engineer checks with raw-response=true and notices that the manager’s email is returned, but not saved in the context. How can the engineer save the data […]

How long is the trial period for paid content packs? A. 30 days B. 14 days C. 7 days D. 60 days Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/marketplace/marketplace-subscriptions.html

Which two statements describe how timers are configured to start and stop automatically in a playbook? (Choose two.) A. Use a field of Number to count the number of seconds elapsed between two tasks B. After the playbook has run, calculate the total time taken and set the timer field with this value C. To […]

In which three locations can an engineer try to find information, when troubleshooting a failed integration instance error produced by the test button? (Choose three.) A. The audit log B. The log bundle C. The source code for an integration D. The error message returned directly below the button E. The playground war room

What is a primary use case of data collection tasks? A. To allow multi-question surveys without authentication restrictions B. To automate tasks such as parsing a file or enriching indicators C. To generate new widgets for a dashboard D. To determine different paths in a playbook Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar-admin/playbooks/playbook-tasks/communication-tasks/create-a-data-collection-task.html

Which two capabilities do Automation script settings include? (Choose two.) A. Define ‘parameters’ B. Correlate to incident types C. Define ‘outputs’ D. Set password protection

Which two causes may be occurring if an integration test is working, but the integration is not fetching incidents? (Choose two.) A. The ’Fetches Incidents’ option may not have been enabled B. There are no new events from the external service C. The first fetch should be manually triggered to start the fetching process D. […]

An engineer notices that playbooks only start once the user clicks the ‘investigate’ button and he/she would like the playbook to start automatically. How can this be implemented? A. Add the playbook to the integration’s settings B. Select ‘Run playbook automatically’ from the incident type settings C. Add the !startinvestigation automation to the beginning of […]