3.9 Explain Job Creation and Management XSOAR-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · easy

   An administrator needs to create a job that runs a log-collection playbook every 30 minutes. The team wants to avoid using cron expressions to keep the configuration simple. Which predefined interval should the administrator select when creating the job?

   • AEvery hour
   • BDaily
   • CEvery 30 minutes
   • DEvery 15 minutes
   Reveal Solution Discussion Select an answer first
2. 7application · easy

   A team wants to create a job that runs a playbook at 23:00 every night. They want to use a cron expression to ensure precision. Which cron expression should the administrator use?

   • A0 0 * * *
   • B23 0 * * *
   • C0 23 * * 1
   • D0 23 * * *
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A job that runs a threat-intel enrichment playbook has been failing intermittently. The execution history shows that failures occur only when the external API returns a 429 (rate limit) response. The administrator wants to reduce the number of failed runs without changing the playbook logic. The job currently runs every 15 minutes with retries enabled (3 retries, 1-minute interval). Which adjustment is most likely to reduce failures?

   • ADisable retries and rely on the next scheduled run to pick up the data.
   • BChange the job schedule to run every 5 minutes.
   • CIncrease the retry interval to 5 minutes and keep the retry count at 3.
   • DIncrease the retry count to 10 while keeping the retry interval at 1 minute.
   Reveal Solution Discussion Select an answer first
5. 9application · easy

   A job has been running successfully for weeks, but the administrator wants to verify that the last run completed without warnings. Where should the administrator look to confirm the status of the most recent execution?

   • AThe job's execution history page, reviewing the status column of the latest entry.
   • BThe playbook's incident list, filtering for incidents created by the job.
   • CThe job's schedule settings, checking the 'Last run' timestamp.
   • DThe server's system log, searching for the job's name.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An administrator notices that a scheduled job is consuming excessive resources and wants to temporarily stop it from running without losing its configuration or execution history. The team plans to re-enable the job after a maintenance window. What should the administrator do?

   • ADelete the job and recreate it after the maintenance window.
   • BPause the job from the job management page.
   • CDisable the associated playbook from the Playbook page.
   • DEdit the job and change the schedule to a far-future date.
   Reveal Solution Discussion Select an answer first