1.2 Explain the Process of Planning and Deploying Engines XSOAR-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A large enterprise is planning to deploy XSOAR engines to support 500+ integrations across multiple network zones. The security team has a mandate to ensure high availability for critical incident response playbooks. They are considering deploying two engines in the same network zone to provide redundancy. However, the infrastructure team has a strict policy that no single point of failure should exist in the same network segment. Which deployment strategy best satisfies both the high-availability requirement and the infrastructure policy?

   • ADeploy three engines in the same zone to ensure that at least two are always available.
   • BDeploy two engines in the same network zone but on different physical hosts.
   • CDeploy one engine in the primary zone and a second engine in a separate, redundant network zone.
   • DDeploy a single, more powerful engine to handle all integrations and rely on the XSOAR server's built-in failover.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   When planning the deployment of an XSOAR engine, which factor most directly influences the number of engines required in an environment?

   • AThe version of the XSOAR server software
   • BThe number of users who access the XSOAR platform
   • CThe geographical location of the XSOAR server
   • DThe number of integrations that need to communicate with external systems
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An XSOAR administrator needs to update an engine to a new version that includes critical security patches. The engine is currently running several active playbooks. What is the recommended approach to perform the upgrade with minimal impact on ongoing operations?

   • AUpgrade the engine immediately, as the upgrade process automatically pauses all running playbooks.
   • BSchedule the upgrade during a maintenance window and ensure that no critical playbooks are scheduled to run during that time.
   • CUpgrade the engine only after all playbooks have been permanently disabled.
   • DDisable the engine, upgrade it, and then re-enable it without any further checks.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   An organization is decommissioning an old XSOAR engine that has been running several critical integrations. The team wants to ensure a smooth transition to a new engine without any downtime for the playbooks that depend on these integrations. What is the most effective approach to decommission the old engine?

   • AKeep the old engine running but uninstall its integrations and install them on the new engine.
   • BInstall and configure the new engine, migrate the integrations to it, verify they work, and then decommission the old engine.
   • CDecommission the old engine first and then install the new engine to avoid any configuration conflicts.
   • DDisable the old engine in the XSOAR UI and immediately remove its host from the network.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which action is part of the ongoing lifecycle management of an XSOAR engine?

   • AChanging the engine's IP address weekly to avoid detection
   • BReinstalling the engine after every integration change
   • CDeleting the engine's logs daily to free up disk space
   • DApplying security patches to the engine's operating system
   Reveal Solution Discussion Select an answer first