3.9 Explain Job Creation and Management XSOAR-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A job has been failing consistently for the past 24 hours. The administrator reviews the execution history and sees that every run fails with the same error: 'Integration instance not found.' The job's playbook uses a specific integration instance. What is the most likely cause of this failure?

   • AThe integration instance was deleted or renamed, breaking the job's reference to it.
   • BThe playbook was modified to use a different integration that is not configured.
   • CThe job's retry count was set too high, causing the integration to be rate-limited.
   • DThe job's schedule was changed to run at a time when the integration is unavailable.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which action is available when managing an existing job in XSOAR?

   • APausing the job to temporarily stop its execution
   • BAssigning the job to a specific user for manual execution
   • CConverting a job to an incident type
   • DChanging the job's unique ID after creation
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A security operations team needs a job to run a playbook that checks for new indicators every 2 hours, but only between 06:00 and 22:00. The playbook takes up to 10 minutes to complete. The administrator wants to avoid overlapping executions and ensure the job does not run outside the specified window. Which cron expression should be used?

   • A0 6-21/2 * * *
   • B0 6-20 * * *
   • C0 6-22 * * *
   • D0 6-22/2 * * *
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   When configuring a job schedule in XSOAR, what does the 'Start Time' setting control?

   • AThe duration of each job run
   • BThe time after which the job will be automatically deleted
   • CThe time zone used for all job logs
   • DThe date and time when the job's first run will occur
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When creating a new job in XSOAR, which of the following must be selected or configured as part of the initial job setup?

   • AThe Azure subscription ID for cloud resource access
   • BThe incident severity level for all alerts generated by the job
   • CThe job type (e.g., Indicator Feed, Scheduled, or Playbook)
   • DThe email notification list for job completion alerts
   Reveal Solution Discussion Select an answer first