In a Cortex XSOAR playbook, a task requires the IP address of the incident's source entity. Which input configuration correctly references the incident field containing this value?

inputs.sourceIP: ${incident.sourceip}

inputs.sourceIP: ${task.sourceip}

inputs.sourceIP: ${context.sourceip}

inputs.sourceIP: ${playbook.sourceip}

Palo Alto NetworksCertified XSOAR Engineer

Domain 3Objective 1

3.1 Explain Playbook Task Input and Output Configuration and Results XSOAR-ENGINEER Practice Questions (Page 4)

Part of the Playbook Development domain, which accounts for 30% of the XSOAR-ENGINEER exam.

16questions here

4free pages

5concepts

30%of the exam

Questions 16–16

16foundation · easy
In a Cortex XSOAR playbook, a task requires the IP address of the incident's source entity. Which input configuration correctly references the incident field containing this value?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to XSOAR-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “XSOAR-ENGINEER” is a trademark of its owner, used for identification only.

3.1 Explain Playbook Task Input and Output Configuration and Results XSOAR-ENGINEER Practice Questions (Page 4)

Questions 16–16

In a Cortex XSOAR playbook, a task requires the IP address of the incident's source entity. Which input configuration correctly references the incident field containing this value?

Keep studying — Playbook Development