3.8 Explain the Process of Creating and Applying Automation Scripts XSOAR-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a best practice for maintaining automation scripts in XSOAR to ensure they remain usable across different playbooks?

   • ACreating a separate script for each playbook to avoid conflicts
   • BStoring all scripts in a single large file for easier management
   • CKeeping scripts generic and reusable by avoiding hard-coded values
   • DDeleting old versions immediately after creating a new one
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In XSOAR, which component of an automation script definition explicitly declares the data that the script expects to receive when invoked?

   • AThe outputs section
   • BThe entry context
   • CThe inputs section
   • DThe script arguments
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   When creating a new automation script in XSOAR, what is the primary purpose of defining the 'Outputs' section?

   • ATo define the error handling behavior of the script
   • BTo list the Python libraries required by the script
   • CTo declare the data the script will return, including its context path and type
   • DTo specify the parameters the script accepts when called
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An analyst is writing a Python automation script that will take an incident ID and return a table of related indicators. The analyst wants to ensure the script can be reused by other playbooks that may pass different argument names. What is the best practice for defining the script's input parameters?

   • ADefine the input parameter only in the playbook task, not in the script code.
   • BHardcode the incident ID as a global variable in the script.
   • CUse demisto.args().get('incident_id') and provide a default value in the script's metadata comment.
   • DUse the 'demisto.incident()' function to retrieve the current incident ID without any input parameters.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An engineer is writing a script that will be shared across multiple teams. The script needs to accept a list of IP addresses and return a report. The engineer wants to ensure the script is robust and easy to maintain. Which practice is most important when defining the script's inputs and outputs?

   • AUse generic names like 'arg1' and 'result' to keep the script flexible.
   • BMinimize the number of inputs to reduce complexity, even if it means hardcoding some values.
   • CReturn all data in a single string to simplify the output structure.
   • DUse clear, descriptive names for inputs and outputs and document them in the script's metadata.
   Reveal Solution Discussion Select an answer first