A job that runs a threat-intel update playbook has been failing intermittently for the past three days. The administrator needs to identify the exact error message from the most recent failure and determine whether the failure was a timeout or an authentication issue. What should the administrator do first?

Edit the job and change the schedule to run every minute to reproduce the failure more quickly.

Delete the job and recreate it with the same parameters to clear any corrupted state.

Pause the job and manually run the playbook from the Playbook page to see the error.

Open the job's execution history and review the 'Execution Log' tab of the most recent failed run.

A job was created with the wrong playbook attached. The administrator needs to correct this without losing the job's schedule or execution history. What should the administrator do?

Pause the job and manually run the correct playbook from the Playbook page.

Edit the job and change the associated playbook in the job configuration.

Delete the job and create a new one with the correct playbook.

Create a new job with the correct playbook and leave the old job running.

A security team wants to create a job that runs a playbook once every hour, but only during business hours (09:00–17:00) on weekdays. They need the job to start at 09:00 and stop at 17:00. Which scheduling approach should the administrator use?

Create a job with a cron expression '0 9-17 * * 1-5' but set the job type to 'One-time'.

Create a job with a predefined interval of 'Every hour' and set the start time to 09:00.

Create a single job with a cron expression that specifies the hour range and weekdays.

Create two separate jobs: one that runs hourly from 09:00 to 16:00 and another that runs at 17:00.

Where can you view the execution history of a job in XSOAR?

In the 'Playbooks' page under the 'Runs' section

In the 'Logs' page under 'System Events'

In the 'Incidents' page under the 'Jobs' filter

In the job's details page under the 'Execution History' tab

Palo Alto NetworksCertified XSOAR Engineer

Domain 3Objective 9

3.9 Explain Job Creation and Management XSOAR-ENGINEER Practice Questions (Page 3)

Part of the Playbook Development domain, which accounts for 30% of the XSOAR-ENGINEER exam.

23questions here

5free pages

4concepts

30%of the exam

Questions 11–15

11application · medium
A job that runs a threat-intel update playbook has been failing intermittently for the past three days. The administrator needs to identify the exact error message from the most recent failure and determine whether the failure was a timeout or an authentication issue. What should the administrator do first?
Select an answer first
12foundation · easy
In XSOAR, which job type is specifically designed to run a playbook on a recurring basis without requiring an incident trigger?
Select an answer first
13application · easy
A job was created with the wrong playbook attached. The administrator needs to correct this without losing the job's schedule or execution history. What should the administrator do?
Select an answer first
14application · medium
A security team wants to create a job that runs a playbook once every hour, but only during business hours (09:00–17:00) on weekdays. They need the job to start at 09:00 and stop at 17:00. Which scheduling approach should the administrator use?
Select an answer first
15foundation · easy
Where can you view the execution history of a job in XSOAR?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XSOAR-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “XSOAR-ENGINEER” is a trademark of its owner, used for identification only.

3.9 Explain Job Creation and Management XSOAR-ENGINEER Practice Questions (Page 3)

Questions 11–15

In XSOAR, which job type is specifically designed to run a playbook on a recurring basis without requiring an incident trigger?

A job was created with the wrong playbook attached. The administrator needs to correct this without losing the job's schedule or execution history. What should the administrator do?

A security team wants to create a job that runs a playbook once every hour, but only during business hours (09:00–17:00) on weekdays. They need the job to start at 09:00 and stop at 17:00. Which scheduling approach should the administrator use?

Where can you view the execution history of a job in XSOAR?

Keep studying — Playbook Development