2.2 Explain Field and Layout Configuration XSOAR-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In XSOAR, what is the primary purpose of an incident layout?

   • ATo automate incident response actions
   • BTo define the structure and arrangement of fields and sections in the incident view
   • CTo control user permissions for incident access
   • DTo store incident data in a database
   Reveal Solution Discussion Select an answer first
2. 17application · easy

   A team needs to create a field to store the priority of an incident, with values 'P1', 'P2', 'P3', and 'P4'. They want to ensure only these values can be entered. Which field type should be used?

   • ADropdown field with the four values defined
   • BText field
   • CDate field
   • DNumber field
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security team has a 'Confidential' field in their incident layout that should only be visible to users with the 'Admin' role. Other users should not see this field at all. How should this be configured?

   • ACreate a new incident type for Admins with a layout that includes the field.
   • BSet the field to read-only for all users except Admins.
   • CMove the field to a separate section and mark that section as hidden.
   • DUse layout permissions to restrict the field's visibility to the 'Admin' role.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A team wants to add a section to their incident layout that displays a list of related indicators. The list should be automatically populated from the incident's indicators. What should be added to the layout?

   • AA text field for each indicator.
   • BA markdown widget with a static list of indicators.
   • CAn indicators widget configured to display the incident's indicators.
   • DA notes widget where analysts manually list indicators.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   In XSOAR, what is a 'widget' in the context of layout configuration?

   • AA reusable component that displays dynamic data or visualizations
   • BA permission rule for field visibility
   • CA type of field that stores numeric data
   • DA script that automates incident response
   Reveal Solution Discussion Select an answer first