4.4 Demonstrate Understanding of Dashboard and Report Configuration XSOAR-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A SOC manager wants a dashboard that shows real-time metrics for the current day. The manager is concerned about performance and wants the dashboard to load quickly. The dashboard will be shared with the entire SOC team. What is the most important consideration when configuring this dashboard?

   • AShare the dashboard with the 'All Users' role to ensure everyone can access it, regardless of performance.
   • BUse a single complex widget that displays all the required data in one visualization.
   • CUse as many widgets as possible to provide the most comprehensive view, even if it slows down loading.
   • DUse a minimal number of widgets, each with a focused query, to reduce the load on the XSOAR server and ensure fast loading.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An analyst is creating a dashboard for a SOC manager who wants to see the total number of open critical incidents, the number of incidents closed in the last 24 hours, and the average response time. The manager wants a clean, at-a-glance view. Which combination of widgets should the analyst use?

   • AA pie chart widget showing the proportion of incidents by severity.
   • BA large table widget that lists all incidents with their status, severity, and response time.
   • CA line chart widget that plots all three metrics over time.
   • DThree single-value widgets: one for open critical incidents, one for incidents closed in 24 hours, and one for average response time.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An analyst wants to add a widget to a dashboard that shows the number of incidents currently assigned to each analyst. The goal is to visualize the current workload distribution across the team. Which widget type is most appropriate?

   • AA text widget that lists the names of all analysts.
   • BA bar chart widget that counts incidents grouped by the 'Owner' field.
   • CA line chart widget that shows the number of incidents over time.
   • DA single-value widget that shows the total number of open incidents.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   When creating a report in XSOAR, which of the following is a configuration step?

   • ASelecting the report layout
   • BArranging widgets on the report canvas
   • CAdding a widget to the report
   • DCustomizing the dashboard's color scheme
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A large SOC has a 'Level 1' role and a 'Level 2' role. Level 1 analysts should see a dashboard with only basic incident metrics, while Level 2 analysts should see the same dashboard plus additional widgets showing advanced threat intelligence data. The dashboard is currently shared with both roles with the same permissions. What is the most effective way to meet these requirements?

   • ACreate a single dashboard with all widgets and share it with both roles, but restrict the 'Level 1' role from viewing the dashboard entirely.
   • BShare the dashboard with both roles but set the advanced widgets to be visible only to the 'Level 2' role.
   • CCreate two separate dashboards: one with basic widgets for Level 1, and one with basic plus advanced widgets for Level 2. Share each dashboard with the appropriate role.
   • DKeep a single dashboard and rely on the individual analysts to hide the advanced widgets they don't need.
   Reveal Solution Discussion Select an answer first