In which two locations can filters and transformers be used in XSOAR? (Choose two.)
When browsing the Marketplace for new content packs, which details about each pack are you able to view?
Where would you look to find a personalized view of your own incidents and tasks?
What assigns newly ingested event attributes to incident fields?
Which field type should be used to hold more than 60,000 characters of unformatted text?
When developing the playbook, which of the following can be used by a XSOAR Administrator?
An engineer asked for a specific command in an integration but the capability does not exist. The engineer decided to edit the existing integration by copying the integration and adding the needed commands.
What is the main concern when adding these commands?
Which built-in automation/command cab be used to change an incident’s type?
In order to automatically run a playbook on the indicators fetched by an integration, what would an XSOAR Administrator setup?
An XSOAR engineer has been tasked with exporting all indicators from the production environment in the last 90 days. The final report needs to be in CSV format containing all indicator fields. How can this task be achieved?
Which investigation element is best suited for collaboration among users?
When uploading content, which two options could the upload include? (Choose two.)
When creating an incident layout section, it is best to place long field values within which of the following?
How can Cortex XSOAR administrators prevent junior analysts from viewing a senior analyst dashboard?
An administrator wants to send an email via the Mail Sender integration. Which of the following out of the box methods would be used for that?
Which three scripting languages can an engineer use to write XSOAR automations? (Choose three.)
On the System Diagnostics page, what is the default minimum size for a Work Plan to be considered big?
What is the correct expression to use when filtering only PDF files?
A playbook task generates a report as HTML in the context data.
An engineer creates a custom indicator field of type "HTML" and adds the field to a section in a custom indicator layout. How can the engineer populate the HTML field in the indicator layout?
Which two features does XSOAR offer to help recover from a server failure? (Choose two.)
What will happen if a playbook debugger is left running for more than 24 hours?
Which task type would be used to verify/check that an integration was enabled?
What is a primary use case of data collection tasks?