1.6 Explain the Process of Maintaining and Troubleshooting the System XSOAR-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   An XSOAR administrator is troubleshooting an issue where a playbook fails only when it runs as part of a multi-tenant setup. The playbook works in the main tenant but fails in a child tenant. The error is 'Insufficient permissions'. The administrator has verified that the integration credentials are correct. What should the administrator investigate next?

   • AThe playbook's logic to see if it uses tenant-specific variables that are not defined in the child tenant.
   • BThe XSOAR server's system logs for disk space issues that might affect the child tenant.
   • CThe network connectivity between the child tenant and the external service.
   • DThe role and permission assignments for the integration's service account within the child tenant.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An administrator notices that the XSOAR server's disk space is decreasing steadily over several weeks. The server's log directory is on the same partition as the application. Which log analysis step would best help identify the cause of the disk consumption?

   • AExamine the database backup logs to confirm that backups are being stored on a different partition.
   • BReview the audit log to see which users have been accessing the system most frequently.
   • CCheck the server's event viewer for application crashes that may be generating large dump files.
   • DCheck the size of the log files and identify which log is growing the fastest over time.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   An XSOAR administrator is troubleshooting an integration that fails with 'Error 500 Internal Server Error' from the external service. The integration worked earlier today. The administrator has confirmed that the API endpoint is reachable and the credentials are valid. What should the administrator do next to determine if the issue is on the XSOAR side or the external service side?

   • ASend a test request to the external service using a tool like curl with the same payload and headers.
   • BRestart the XSOAR server to clear any cached state that might be causing the error.
   • CDisable and re-enable the integration to reset its connection state.
   • DCheck the XSOAR server's system logs for disk space or memory issues.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An XSOAR integration that connects to an on-premises Active Directory server has started failing. The error log shows 'Connection timed out'. Other integrations that use outbound HTTPS to cloud services are working. What is the most likely cause of this issue?

   • AThe XSOAR server cannot reach the on-premises Active Directory server over the network.
   • BThe Active Directory server's API credentials have expired.
   • CThe XSOAR server's DNS resolver is misconfigured for all external domains.
   • DThe Active Directory integration's playbook has a logic error in the credential retrieval step.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which common XSOAR issue is most likely indicated by a sudden increase in CPU and memory usage?

   • ABackup failure
   • BIntegration failure
   • CNetwork connectivity loss
   • DPerformance degradation
   Reveal Solution Discussion Select an answer first