marks4sure logo
An Engineer wants to filter a csvList value according to a dynamic value saved under the test context key.
Which three values would save the test context key? (Choose three.)
A large number of incidents were deleted by mistake.
Which two architecture components can be used to recover the lost data? (Choose two.)
A SOC manager built a dashboard and would like to share the dashboard with other team members. How would the SOC manager create a dashboard that meets this requirement?
What are inputs and outputs in reference to a Playbook Development Lifecycle? (Choose three.)
To avoid exceeding API quotas for third-party services, indicators are only updated after the indicator cache expiration period. What is the default cache expiration period for indicators in XSOAR (minutes/days)?
On the System Diagnostics page, what is the default minimum size for a Work Plan to be considered big?
An organization has recently acquired another company as its subsidiary. The subsidiary has its infrastructure on AWS cloud as illustrated in the image below:
The organization wants to use the mail server location on the subsidiary's cloud to send emails. Without acquiring additional licenses, which XSOAR component can fulfill the requirement?
Given an incident with three files, how could the name of the second file be referenced?
Inside the Incidents table view, which actions can be performed on the selected incidents? (Choose two.)
When browsing the Marketplace for new content packs, which details about each pack are you able to view?
You need to retrieve a list of all malicious hashes over the last 30 days. What is the correct query to use?
An incident field is created having the display name as Source_IP. How can the field be accessed?
Where do you navigate to monitor and improve the system performance and resilience for hosts in a multitenant environment?
An engineer would like to change an incident’s SLA according to the severity field changes. How can the engineer achieve this task?
A playbook task generates a report as HTML in the context data.
An engineer creates a custom indicator field of type "HTML" and adds the field to a section in a custom indicator layout. How can the engineer populate the HTML field in the indicator layout?
TESTED 03 May 2024