New Year Sale Special - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sntaclus

Which two reasons would lead an engineer to create a custom widget? (Choose two.)

A.

To visualize server configuration keys

B.

To visualize XSOAR list data

C.

To visualize complex incident data calculations

D.

To visualize context data

E.

To visualize a custom query

Which two incident search queries are valid? (Choose two.)

A.

created:>=”7 days”

B.

owner===admin

C.

role is Analyst

D.

status:closed –category:job

During the regular maintenance of XSOAR a customer noticed that there was an update available for the Active Directory content pack (current version 1.4.6) and updated the content pack to the latest version (version 1.4.11). However, after the update the customer noticed that the Active Directory Query integration is not working properly and asked you to resolve the issue.

Which of the following set of steps can help to resolve the issue?

A.

Navigate to Settings

View the configured integrations and select Active Directory Authentication

Delete all integration instances and add all integration instances again

B.

Navigate to Marketplace

View the installed content pack and select Active Directory content pack

Select version 1.4.6 and click on "Revert to this version"

C.

Navigate to Settings

View the configured integrations and select Active Directory Query

Delete all integration instances and add all integration instances again

D.

Navigate to Marketplace

View the installed content pack and select Active Directory content pack

Click on uninstall content pack

Navigate to Marketplace browser and reinstall the Active Directory content pack

Match the corresponding action with the appropriate playbook tasks.

When developing the playbook, which of the following can be used by a XSOAR Administrator?

A.

The Debugger panel to test data with one of last five incidents. This will affect the incident’s original incident data.

B.

Context data from existing incidents by exporting the YAML data from incidents and importing it to playbook editor.

C.

Debugger panel and XML data from a similar incident with New Mock Incident. This will not affect the incidents original incident data.

D.

The Debugger panel to test data with one of last fifty incidents. This will not affect the incident’s original incident data.

Which built-in automation/command cab be used to change an incident’s type?

A.

setIncident

B.

Set

C.

GetFieldsByIncidentType

D.

modifyIncidentFields