4.2 Demonstrate Understanding of War Room Activities XSOAR-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How does an analyst add a manual note to the War Room?

   • ABy sending an email to the incident's dedicated address.
   • BBy running the 'add-note' command in the CLI.
   • CBy typing in the 'Add a note' field at the top of the War Room and clicking the add button.
   • DBy editing the incident's description field.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Where does an analyst type a command to run it in the War Room?

   • AIn the command input field at the bottom of the War Room.
   • BIn the incident's description field.
   • CIn the task list's 'new task' field.
   • DIn the global search bar.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In the War Room, what does a 'command entry' represent?

   • AA manually added note that documents an analyst's observation.
   • BA system-generated alert that indicates a potential security issue.
   • CA summary of the incident's overall status and severity.
   • DA record of a command that was executed during the investigation, including its parameters and the user who ran it.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   How does an analyst access the War Room for a specific incident in XSOAR?

   • ABy using a dedicated War Room URL that is generated for each incident.
   • BBy navigating to the War Room tab from the Incidents page and selecting the incident.
   • CBy clicking on the War Room icon in the global navigation bar.
   • DBy running the 'open-war-room' command in the CLI.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the purpose of a 'note entry' in the War Room?

   • ATo allow analysts to document observations, hypotheses, and decisions in their own words.
   • BTo record a command that was executed by an integration.
   • CTo display the output of a command in a structured format.
   • DTo automatically trigger a playbook when added.
   Reveal Solution Discussion Select an answer first