3.9 Explain Job Creation and Management XSOAR-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security team wants to run a playbook that checks for new phishing indicators every 15 minutes, but only during the workday (08:00–18:00) on weekdays. The playbook takes 2 minutes to complete. The administrator wants to use a single job with a cron expression. Which cron expression should be used?

   • A0/15 8-17 * * 1-5
   • B*/15 8-17 * * *
   • C*/15 8-18 * * 1-5
   • D*/15 8-17 * * 1-5
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a valid way to define a job schedule in XSOAR?

   • AUsing a cron expression to specify minute, hour, day, month, and weekday
   • BUsing a JSON array of timestamps for each run
   • CUsing a PowerShell script to set the schedule
   • DUsing a natural language phrase like 'every weekday at noon'
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A team needs a job that runs a compliance-check playbook at 09:15 on the first Monday of every month. The administrator wants to use a cron expression for precision. Which cron expression should be used?

   • A15 9 1 * *
   • B0 9 1 * 1
   • C15 9 1-7 * 1
   • D15 9 * * 1
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of the 'Execution History' view for a job in XSOAR?

   • ATo delete the job after a successful run
   • BTo change the job's schedule to a different time
   • CTo edit the job's playbook and parameters
   • DTo review the status and results of past job runs
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A job that fetches threat intelligence from an external API has been failing because the API occasionally returns a 503 error. The administrator wants the job to automatically retry failed runs without manual intervention. What should the administrator configure?

   • ACreate a second job that runs 5 minutes after the first job to catch any failures.
   • BPause the job and manually run it whenever the API is known to be available.
   • CModify the playbook to add a conditional task that re-runs the API call on failure.
   • DEnable the 'Retry on failure' option in the job's advanced settings and set the retry count.
   Reveal Solution Discussion Select an answer first