4.3 Use XQL to Query Datasets XSIAM-ANALYST Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which XQL function checks if a string field contains a specified substring?

   • Aincludes
   • Bcontains
   • Cmatch
   • Dfind
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   An analyst needs to query endpoint detection and response data, including alerts and events from sensors. Which XQL dataset should they use?

   • Acloud_audit
   • Bxdr_data
   • Cuser_activity
   • Dnetwork_traffic
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which XQL aggregation function would an analyst use to calculate the average value of a numeric field?

   • Aavg
   • Bcount
   • Csum
   • Dmean
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the output of a query that uses `groupby` without an aggregation function?

   • AAn error, because aggregation is required.
   • BA list of unique combinations of the grouped fields.
   • CAll records, but sorted by the grouped fields.
   • DA single row with the total count of records.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which XQL query correctly specifies the dataset and uses the pipe operator to pass results to a subsequent command?

   • ASELECT event_type, event_id FROM xdr_data
   • BFROM xdr_data THEN fields event_type, event_id
   • Cdataset = xdr_data | fields event_type, event_id
   • Dxdr_data | fields event_type, event_id
   Reveal Solution Discussion Select an answer first