An engineer would like to present a trend using widgets to compare to a previous week’s data. Which two methods will allow the engineer to meet the requirement? (Choose two.)
What are the out-of-the-box aggregate values that can be applied on widgets data?
Which two statements accurately describe layouts? (Choose two.)
When uploading content, which two options could the upload include? (Choose two.)
Where can engineers add the post-processing scripts to incidents?
Newly created subplaybooks do not have any inputs, or outputs. What is necessary to make them functional? (Choose two.)
In order to automatically run a playbook on the indicators fetched by an integration, what would an XSOAR Administrator setup?
Which two incident search queries are valid? (Choose two.)
An engineer wants to customize the regex for the default IP indicator type. How can this change be implemented?
Which development languages are supported when creating XSOAR automation scripts?
After enriching a username using Active Directory, an engineer would like to send an email to the user’s manager. However, this functionality is not part of the command output. The engineer checks with raw- response=true and notices that the manager’s email is returned, but not saved in the context.
How can the engineer save the data so it will be accessible?
An analyst wants to run a script to remove usernames from an incident before the incident becomes active in XSOAR. How can this be achieved?
Which component can be part of a load balancing group?
Match the operations with the appropriate context.
An engineer is developing a playbook that will be run multiple times for testing purposes. What is the recommended first task to be used in the playbook?
Which three support types are included in the Marketplace Content Packs? (Choose three.)
What happens when an integration is deprecated?
Which option is available in XSOAR to create the body of a Threat Intel Report?
What is a primary use case of data collection tasks?
Given the following context data, what would be the expected output of the expression?
Where are incident layouts customized?
When creating a new tab in the layout, which section cannot be added?
In which two scenarios would it be appropriate to implement a loop for a sub-playbook? (Choose two.)