1.4 Demonstrate Knowledge of Managing Marketplace Pack Installations and Version Updates XSOAR-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security operations team is setting up a new XSOAR instance in a restricted network segment that has no direct internet access. They need to install the 'Cortex XDR - Investigation and Response' pack. The team has already downloaded the pack file from the Palo Alto Networks website. What must the team do to install this pack in their air-gapped environment?

   • APlace the pack file in the XSOAR server's /tmp directory and restart the server.
   • BUpload the pack file via the Marketplace's 'Upload Pack' option in the XSOAR UI.
   • CRun the 'xsoar-cli pack install' command on the server's command line.
   • DUse the 'Install' button in the Marketplace, which will automatically detect the local file.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the result of uninstalling a pack from XSOAR?

   • AThe pack is moved to the trash and can be restored within 30 days.
   • BThe pack is hidden from the Marketplace but remains installed.
   • CThe pack is disabled but its content remains available for use.
   • DThe pack's content is removed from the system and the pack is no longer listed as installed.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What happens automatically when you install a pack that has dependencies on other packs?

   • AThe dependencies are ignored and the pack installs with limited functionality.
   • BYou are prompted to choose which dependencies to install.
   • CThe installation fails and you must manually install each dependency.
   • DThe dependent packs are installed automatically if they are not already present.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   An administrator is updating the 'Cortex XDR' pack from version 4.0 to 5.0. The update fails because the 'Common Playbooks' pack is at version 2.0, but the new 'Cortex XDR' pack requires version 3.0. The administrator has verified that version 3.0 of 'Common Playbooks' is available in the Marketplace. What is the correct sequence of actions?

   • AUpdate 'Common Playbooks' to version 3.0 first, then update 'Cortex XDR'.
   • BForce the update of 'Cortex XDR' by ignoring the dependency warning.
   • CDowngrade 'Cortex XDR' to version 4.0 and skip the update.
   • DUninstall 'Common Playbooks' and then update 'Cortex XDR'.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An XSOAR administrator is checking for pack updates and sees that the 'Common Scripts' pack has a new version available. However, the 'Update' button is greyed out. What is a likely reason for this?

   • AThe pack is currently in use by a running playbook.
   • BThe XSOAR server is not connected to the internet.
   • CThe pack is already at the latest version.
   • DThe pack has been customized and is not eligible for automatic updates.
   Reveal Solution Discussion Select an answer first