The SOC manager wants to automatically generate and distribute a weekly summary report of all incidents closed in the past seven days. The report should be generated every Monday at 08:00 without any manual intervention. Which Cortex XSOAR component should be used to implement this requirement?

An automation rule that runs on incident creation

A playbook that is manually launched

A script that is called from the War Room

Which of the following is a typical use case for a job in Cortex XSOAR?

Running a one-time query to check the status of a specific incident

Generating a scheduled daily report of security alerts

Executing a playbook step to block an IP address during an incident

Manually running a script to normalize data from a CSV file

A security analyst needs to run a Python script that queries an external threat intel API and enriches indicators in Cortex XSOAR. The analyst wants to run this manually from the War Room whenever an incident requires it, without creating a scheduled task. Which Cortex XSOAR component should the analyst use?

A playbook with a manual trigger

A job configured with a recurring trigger

An integration instance with a polling command

A script invoked from the War Room

What is the primary purpose of a job in Cortex XSOAR?

To store configuration data for integrations and playbooks

To automate tasks on a recurring schedule, such as reports or maintenance

To run a piece of code on demand when an analyst triggers it

To define a one-time action that runs immediately when created

An organization wants to automatically back up its Cortex XSOAR configuration and custom content to an external repository every Sunday at 03:00. The backup process is a single, self-contained task. Which component should be used?

A playbook triggered by a new incident

An automation rule that runs on incident close

A script that is run manually by an administrator

A job with a scheduled trigger set to run every Sunday at 03:00

Palo Alto NetworksCertified Security Operations Professional

Domain 4Objective 2

4.2 Differentiate Between Scripts and Jobs in Cortex XSOAR SECURITY-OPERATIONS-PROFESSIONAL Practice Questions (Page 3)

Part of the Cortex XSOAR domain, which accounts for 16% of the SECURITY-OPERATIONS-PROFESSIONAL exam.

20questions here

4free pages

5concepts

16%of the exam

Questions 11–15

11application · medium
The SOC manager wants to automatically generate and distribute a weekly summary report of all incidents closed in the past seven days. The report should be generated every Monday at 08:00 without any manual intervention. Which Cortex XSOAR component should be used to implement this requirement?
Select an answer first
12foundation · easy
Which of the following is a typical use case for a job in Cortex XSOAR?
Select an answer first
13application · medium
A security analyst needs to run a Python script that queries an external threat intel API and enriches indicators in Cortex XSOAR. The analyst wants to run this manually from the War Room whenever an incident requires it, without creating a scheduled task. Which Cortex XSOAR component should the analyst use?
Select an answer first
14foundation · easy
What is the primary purpose of a job in Cortex XSOAR?
Select an answer first
15application · medium
An organization wants to automatically back up its Cortex XSOAR configuration and custom content to an external repository every Sunday at 03:00. The backup process is a single, self-contained task. Which component should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “SECURITY-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.