1.2 Explain the Process of Planning and Deploying Engines XSOAR-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is planning to deploy XSOAR engines to support a new security operations center. The SOC will run playbooks that perform heavy data enrichment and long-running remediation tasks. The infrastructure team has limited budget and wants to minimize costs while ensuring the engines can handle the expected workload. What is the most important factor to consider when sizing the engine VMs?

   • AThe total amount of disk space on the XSOAR server.
   • BThe CPU and memory requirements of the integrations and playbooks that will run on the engine.
   • CThe number of playbooks that are currently disabled.
   • DThe number of users who will access the XSOAR UI.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is setting up a new XSOAR engine on a Linux server. The server is behind a strict firewall that only allows outbound HTTPS traffic. The XSOAR server is also configured to use a custom port for engine communication. What must the administrator do to ensure the engine can connect to the XSOAR server?

   • AConfigure the engine to use the custom port and ensure the firewall allows outbound HTTPS traffic to that port.
   • BOpen the custom port for inbound traffic on the engine's firewall.
   • CChange the XSOAR server to use a standard port like 443.
   • DInstall a VPN client on the engine to bypass the firewall.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security engineer is deploying a new XSOAR engine on a Windows Server 2019 VM to run integrations that require PowerShell. The engine will be managed by a central XSOAR server. During the initial setup, the engineer downloads the engine installer from the XSOAR UI and runs it on the VM. Which additional configuration step is required to ensure the engine can communicate with the XSOAR server and execute playbooks?

   • AConfigure a site-to-site VPN between the VM and the XSOAR server.
   • BManually copy the engine binary to the XSOAR server's plugins directory.
   • CInstall a third-party agent on the VM to bridge the engine to the XSOAR server.
   • DRegister the engine with the XSOAR server using the generated registration key.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   An organization has two XSOAR engines: Engine A is in a primary data center, and Engine B is in a disaster recovery site. The team wants to ensure that if Engine A fails, Engine B can automatically take over the execution of critical playbooks. What is the most important configuration to enable this failover capability?

   • AEnsure both engines are registered to the same XSOAR server and that the integrations are configured to use both engines.
   • BEnsure that Engine B has the same IP address as Engine A.
   • CSet up a load balancer in front of the two engines to distribute traffic.
   • DConfigure Engine B to be a standby engine that is only activated manually by an administrator.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization has been running a single XSOAR engine for two years. A recent audit shows that the engine's host is running an outdated OS with known vulnerabilities, and the engine version is several releases behind the XSOAR server. The team plans to upgrade the engine to the latest version. What is the most important prerequisite to verify before starting the engine upgrade?

   • AA new engine is deployed and the old one is decommissioned without any upgrade.
   • BThe XSOAR server is downgraded to match the engine's current version.
   • CAll playbooks are disabled to prevent them from running during the upgrade.
   • DThe engine host's OS is upgraded to a version supported by the new engine release.
   Reveal Solution Discussion Select an answer first