A playbook task requires a static API key as an input. The analyst wants to ensure the key is not exposed in the playbook's logs. How should the analyst configure the input?

Enter the API key as a static value in the input field.

Use a context reference to the API key stored in the incident.

Hardcode the API key in the task's output configuration.

Reference a hidden system variable that contains the API key.

In a Cortex XSOAR playbook task, what does the 'Outputs' section define?

The input parameters required by the task

The error handling logic for the task

The context path where the task's result will be stored

The list of playbook inputs that the task can access

What is the purpose of the 'On Error' setting in a Cortex XSOAR playbook task?

To define what happens if the task fails

To specify the task's timeout duration

To configure the task's output mapping

To set the task's input parameters

A playbook has a task that extracts an IP address from an incident. The extracted IP is stored in the context as `ExtractedIP.Address`. A subsequent task needs to use this IP in a reputation check. How should the analyst reference the IP in the reputation task's input?

Use `{{incident.ExtractedIP.Address}}`

Use `ExtractedIP.Address` without braces

Use `{{task.ExtractedIP.Address}}`

Palo Alto NetworksCertified XSOAR Engineer

Domain 3Objective 1

3.1 Explain Playbook Task Input and Output Configuration and Results XSOAR-ENGINEER Practice Questions (Page 2)

Part of the Playbook Development domain, which accounts for 30% of the XSOAR-ENGINEER exam.

16questions here

4free pages

5concepts

30%of the exam

Questions 6–10

6application · medium
After a playbook runs, an analyst reviews the task results to determine whether a specific enrichment task completed successfully. Which part of the task result should the analyst examine to confirm the task's execution status?
Select an answer first
7application · medium
A playbook task requires a static API key as an input. The analyst wants to ensure the key is not exposed in the playbook's logs. How should the analyst configure the input?
Select an answer first
8foundation · easy
In a Cortex XSOAR playbook task, what does the 'Outputs' section define?
Select an answer first
9foundation · easy
What is the purpose of the 'On Error' setting in a Cortex XSOAR playbook task?
Select an answer first
10application · medium
A playbook has a task that extracts an IP address from an incident. The extracted IP is stored in the context as `ExtractedIP.Address`. A subsequent task needs to use this IP in a reputation check. How should the analyst reference the IP in the reputation task's input?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XSOAR-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “XSOAR-ENGINEER” is a trademark of its owner, used for identification only.