2.7 Explain List Configuration and Management XSOAR-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How can a playbook task update the contents of a key-value list?

   • ABy using the 'ModifyList' command
   • BBy using the 'SetList' automation
   • CBy directly editing the list in the incident layout
   • DBy using the 'UpdateList' script
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security operations team uses a playbook to enrich indicators. They maintain a list of known-bad domains that is updated manually. During an incident, an analyst edits the list to add a newly discovered malicious domain while the playbook is running. What is the expected behavior regarding the playbook's reference to the list?

   • AThe playbook will fail because lists cannot be modified while a playbook is using them.
   • BThe playbook will automatically restart from the beginning to incorporate the new list entry.
   • CThe playbook will use the updated list immediately because lists are read dynamically at each task execution.
   • DThe playbook will continue using the list content that was loaded when the playbook started, so the new domain may not be evaluated until a new playbook run.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What happens to a playbook that references a list that has been deleted?

   • AThe playbook will automatically create a new empty list
   • BThe playbook will fail when it tries to access the list
   • CThe playbook will continue using cached data from the list
   • DThe playbook will skip the task that references the list
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which naming convention is recommended for lists in XSOAR to ensure clarity and maintainability?

   • AUse names that include the creator's initials
   • BUse short, cryptic names to save space
   • CUse descriptive names that reflect the list's purpose
   • DUse the same name for all lists to simplify
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Before deleting a list that is used by multiple playbooks, what is the recommended practice?

   • AUpdate the playbooks to remove references to the list
   • BRename the list to a temporary name
   • CCreate a new list with the same name
   • DDelete the list and then update the playbooks
   Reveal Solution Discussion Select an answer first