An analyst notices that the same IP address appears twice in XSOAR with different reputation scores: one from a manual entry and one from an automated feed. What is the best practice to resolve this duplication?

Change the type of one indicator to 'Other' to avoid the duplicate.

Manually delete the duplicate indicator and keep the one with the higher reputation score.

Ignore the duplicate because XSOAR automatically handles duplicates.

Merge the two indicators into a single indicator, combining their sources and reputation information.

Palo Alto NetworksCertified XSOAR Engineer

Domain 5Objective 3

5.3 Explain the Process of Indicator Configuration XSOAR-ENGINEER Practice Questions (Page 6)

Part of the Threat Intelligence Management domain, which accounts for 18% of the XSOAR-ENGINEER exam.

35questions here

7free pages

10concepts

18%of the exam

Questions 26–30

26application · medium
An analyst notices that the same IP address appears twice in XSOAR with different reputation scores: one from a manual entry and one from an automated feed. What is the best practice to resolve this duplication?
Select an answer first
27foundation · medium
Which of the following is a standard indicator type supported in XSOAR?
Select an answer first
28foundation · medium
Which field is used to set the expiration date for an indicator in XSOAR?
Select an answer first
29foundation · medium
Which indicator creation method is best suited for adding a large list of indicators from a CSV file?
Select an answer first
30foundation · medium
Which XSOAR feature is commonly used to automate indicator enrichment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XSOAR-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “XSOAR-ENGINEER” is a trademark of its owner, used for identification only.

5.3 Explain the Process of Indicator Configuration XSOAR-ENGINEER Practice Questions (Page 6)

Questions 26–30

An analyst notices that the same IP address appears twice in XSOAR with different reputation scores: one from a manual entry and one from an automated feed. What is the best practice to resolve this duplication?

Which of the following is a standard indicator type supported in XSOAR?

Which field is used to set the expiration date for an indicator in XSOAR?

Which indicator creation method is best suited for adding a large list of indicators from a CSV file?

Which XSOAR feature is commonly used to automate indicator enrichment?

Keep studying — Threat Intelligence Management