1.6 Explain the Process of Maintaining and Troubleshooting the System XSOAR-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   After a failed XSOAR upgrade, the server will not start. The administrator has a full backup from before the upgrade. What is the most appropriate recovery procedure?

   • ADelete the XSOAR database files and let the server recreate them on startup.
   • BRestore the full backup to the pre-upgrade version and verify the server starts successfully.
   • CReinstall the operating system and then install the latest XSOAR version from scratch.
   • DRun the upgrade installer again to see if it completes successfully on the second attempt.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   An XSOAR administrator is investigating a performance issue where the server becomes unresponsive for a few minutes every day at the same time. The administrator has reviewed the system logs and found no errors. Which monitoring data should the administrator correlate with the time of the issue to identify the root cause?

   • AThe number of active users logged in at that time.
   • BThe backup logs to see if a backup is running at that time.
   • CThe network traffic logs to see if there is a spike in inbound requests.
   • DScheduled jobs and cron tasks that run at that specific time.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An XSOAR administrator is troubleshooting a playbook that fails only when triggered by a specific incident type. The playbook works fine when run manually. Following a systematic troubleshooting methodology, what should the administrator examine first?

   • AThe user permissions of the account that triggers the automatic playbook run.
   • BThe server's system logs to check for hardware errors that occur only during automatic execution.
   • CThe network configuration to verify that the server can reach external services during automatic runs.
   • DThe incident fields and context data passed to the playbook when triggered by that specific incident type.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of monitoring XSOAR system logs?

   • ATo replace the need for health checks
   • BTo identify anomalies and potential problems early
   • CTo automatically update integrations
   • DTo increase the system's storage capacity
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which XSOAR log is most useful for diagnosing errors during playbook execution?

   • AIntegration log
   • BServer log
   • CPlaybook execution log
   • DAudit log
   Reveal Solution Discussion Select an answer first