5.3 Explain the Process of Indicator Configuration XSOAR-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · medium

   How does XSOAR handle duplicate indicators that have the same value and type?

   • AIt changes the type of one of them
   • BIt automatically deletes the older one
   • CIt keeps both as separate indicators
   • DIt merges them into a single indicator, combining their data
   Reveal Solution Discussion Select an answer first
2. 17foundation · medium

   Why is it important to apply consistent tagging to indicators in XSOAR?

   • AIt prevents indicators from expiring
   • BIt changes the indicator type to a more accurate one
   • CIt automatically increases the indicator's reputation
   • DIt enables efficient filtering and automation based on tags
   Reveal Solution Discussion Select an answer first
4. 18foundation · medium

   Which indicator field stores the actual observable data, such as an IP address or domain name?

   • ASource
   • BType
   • CValue
   • DReputation
   Reveal Solution Discussion Select an answer first
5. 19application · easy

   An analyst is creating an indicator for a file that is suspected to be malware. They have the file's MD5 hash. Which indicator type should they select?

   • AIP
   • BDomain
   • CURL
   • DFile
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An organization needs to share a list of indicators with a partner via a STIX/TAXII feed. They want to automate this sharing process. What is the best approach?

   • AManually export the indicators to a file and send it to the partner.
   • BUse an integration that supports STIX/TAXII export and configure it to share the indicators.
   • CUse the bulk import feature to send the indicators to the partner.
   • DCreate a playbook that emails the indicators to the partner.
   Reveal Solution Discussion Select an answer first