A playbook includes a task that retrieves a file hash from an external service. The task sometimes returns an empty `hash` field when the file is not found. The playbook needs to continue even if the hash is missing, but should log a warning. What is the most appropriate way to handle this?

Use a conditional task that checks if `hash` is empty and logs a warning if so.

Ignore the empty hash and proceed without any special handling.

Set the task's retry count to 3 to ensure the hash is always retrieved.

Configure the task to fail on empty output and add a separate error-handling branch.

A playbook task returns a list of hashes. To store this list under the context path 'File.MD5', what should be configured in the task's Outputs?

Output key: 'MD5', Context path: 'File.MD5'

Output key: 'hashes', Context path: 'File.MD5'

Output key: 'File', Context path: 'MD5'

Output key: 'File.MD5', Context path: 'MD5'

A playbook has a task that extracts a username from an email. The extracted username is stored in the context as `ExtractedUser.Name`. A later task needs to use this username to query an Active Directory. How should the analyst reference the username in the AD query task's input?

Use `ExtractedUser.Name` without braces

Use `{{incident.ExtractedUser.Name}}`

Use `{{task.ExtractedUser.Name}}`

When configuring a task's output, what is the purpose of setting a context path?

To set the task's execution timeout

To define the input parameters for the task

To specify the error handling for the task

To store the task's result in the context for later use

Palo Alto NetworksCertified XSOAR Engineer

Domain 3Objective 1

3.1 Explain Playbook Task Input and Output Configuration and Results XSOAR-ENGINEER Practice Questions (Page 1)

Part of the Playbook Development domain, which accounts for 30% of the XSOAR-ENGINEER exam.

16questions here

4free pages

5concepts

30%of the exam

Questions 1–5

1application · medium
A playbook includes a task that retrieves a file hash from an external service. The task sometimes returns an empty `hash` field when the file is not found. The playbook needs to continue even if the hash is missing, but should log a warning. What is the most appropriate way to handle this?
Select an answer first
2foundation · easy
A playbook task returns a list of hashes. To store this list under the context path 'File.MD5', what should be configured in the task's Outputs?
Select an answer first
3application · medium
A playbook has a task that extracts a username from an email. The extracted username is stored in the context as `ExtractedUser.Name`. A later task needs to use this username to query an Active Directory. How should the analyst reference the username in the AD query task's input?
Select an answer first
4foundation · easy
When configuring a task's output, what is the purpose of setting a context path?
Select an answer first
5foundation · easy
A playbook task needs to use the current time as an input. Which system variable provides this value in Cortex XSOAR?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XSOAR-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “XSOAR-ENGINEER” is a trademark of its owner, used for identification only.