5.3 Explain the Process of Indicator Configuration XSOAR-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · medium

   Which indicator field is used to indicate when the indicator should no longer be considered valid?

   • AReputation
   • BExpiration
   • CSource
   • DValue
   Reveal Solution Discussion Select an answer first
2. 12foundation · medium

   Which of the following is a best practice for managing indicators in XSOAR?

   • AAvoid using tags to keep indicators simple
   • BManually enter all indicators to ensure accuracy
   • CRegularly review and update indicator expiration dates
   • DNever merge duplicate indicators to preserve data
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization wants to ensure that indicators from a specific feed are automatically expired after 90 days. They have an integration that ingests these indicators. What is the best way to configure this?

   • ASet the expiration date in the integration's indicator ingestion settings.
   • BCreate a scheduled playbook that sets expiration dates on all indicators.
   • CManually edit each indicator after ingestion to set the expiration date.
   • DUse the bulk import feature to re-import the indicators with expiration dates.
   Reveal Solution Discussion Select an answer first
5. 14foundation · medium

   Which of the following is a valid method for creating indicators in XSOAR?

   • AOnly through automated integrations
   • BOnly via API calls
   • CManual entry through the Indicators page
   • DOnly through playbook automation
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization receives a CSV file with 10,000 indicators from a threat intelligence provider. They need to import these into XSOAR with minimal manual effort. What is the recommended method?

   • AUse the bulk import feature to upload the CSV file and map the columns to indicator fields.
   • BConvert the CSV to JSON and use the API to create indicators.
   • CUse a playbook that creates indicators one by one from the CSV.
   • DManually enter each indicator into the XSOAR UI.
   Reveal Solution Discussion Select an answer first