3.2 Identify and Describe Playbook Components XSIAM-ANALYST Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   In an XSIAM playbook, which task type is used to branch the flow based on a condition, such as checking whether an incident severity is high?

   • AIntegration task
   • BRegular task
   • CDecision task
   • DSub-playbook task
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which XSIAM playbook task type is used to call an external security product, such as sending a command to a firewall or querying a threat intelligence service?

   • ASub-playbook task
   • BDecision task
   • CIntegration task
   • DRegular task
   Reveal Solution Discussion Select an answer first
3. 18application · medium

   An analyst is creating a playbook that should run a series of enrichment tasks in parallel, then combine the results and make a decision. Which task types should be used to achieve parallel execution?

   • AA sub-playbook that contains all enrichment tasks, called once.
   • BMultiple integration tasks connected to the same starting point, with a decision task after them.
   • CA single integration task that performs all enrichments sequentially.
   • DMultiple regular tasks connected in sequence.
   Reveal Solution Discussion Select an answer first