Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

XSOAR-Engineer Palo Alto Networks XSOAR Engineer

  • Palo Alto Networks
  • 5 free sample questions

About this exam

XSOAR-Engineer is the Palo Alto Networks exam Palo Alto Networks XSOAR Engineer. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
XSOAR-Engineer
Vendor
Palo Alto Networks
Practice questions
Not available yet
Free sample questions
5
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for XSOAR-Engineer.

Question 1

When the verdict of an indicator is set manually, which source reliability does it receive?

  1. Option A:

    F - reliability cannot be found.

  2. Option B:

    A.

  3. Option C:

    Undefined.

  4. Option D:

    A+++.

Show answer and explanation

Correct answer: C

When an analyst manually sets an indicator’s verdict, XSOAR records the verdict with a source named "Manual", and assigns it a reliability of Undefined.

This is explicitly documented under Indicator Verdict + Reliability behavior when a manual override is applied.

Question 2

Which command adds or updates a description to an incident that can be used within widgets?

  1. Option A:

    !setIncident description="This is an updated description.".

  2. Option B:

    !Set key="description" value="This is an updated description.".

  3. Option C:

    !Set key-"description" value-This is an updated description.

  4. Option D:

    !setIncident description=This is an updated description.

Show answer and explanation

Correct answer: A

The !setIncident command is the documented method for updating incident fields programmatically in Cortex XSOAR. The Admin Guide states that the syntax requires proper quoting for parameters, especially when assigning descriptive text that may include spaces. The correct syntax is:

!setIncident description="some text"

This updates the built-in description field at the incident level and allows widgets, dashboards, and reports to use the updated description because XSOAR widgets can read incident fields directly. Option A uses correct syntax with quotes included.

Option B incorrectly uses !Set, which modifies context keys , not incident fields. Option C is invalid due to incorrect parameter formatting (hyphens instead of equals signs). Option D omits quotation marks, causing parsing errors in cases where the value includes spaces, verbs, or punctuation.

Thus, the only correct and fully documented method to update an incident’s description so that it is available to widgets is A: !setIncident description="…" .

See all 5 free sample questions