XSOAR-Engineer

Question 1

Which two behaviors occur while an incident is closed? (Choose two.)

1. Playbook is marked as complete.
2. Commands cannot be executed in the War Room.
3. Timers can no longer run.
4. Running timers are in a paused state.

Question 2

An engineer must create a playbook task which asks a user a single question to determine the next step in the playbook flow. Which type of task will accomplish this goal?

1. Standard task using manual task settings
2. Data collection task using the task option
3. Conditional task using the ask option
4. Data collection task using the generated link option

Question 3

What determines the current verdict for an indicator when multiple sources provide different reliability scores and verdicts?

1. Verdict provided by the most recently updated source
2. Average verdict score from all sources
3. Verdict provided by the source with the highest reliability score
4. Highest severity verdict from all sources

Question 4

The code snippet below is from the fetch command of an integration instance configured to run on the server. demisto.debug(f"(len(incidents)} events fetched") Where is the output from the snippet located when the instance runs an automatic fetch?

1. Incident labels
2. Platform Log bundle
3. Integration Logs table
4. War Room entry

Question 5

Based on the image below, how is the Domain Admin name selected when the country is "US"?