A playbook needs to perform a complex data transformation that involves multiple steps and conditional logic, and this logic will be reused in several other playbooks. The transformation is not available as a built-in command or script. What should the developer do?

Use a series of built-in commands to achieve the transformation.

Use the 'Set' command to manually transform the data.

Use a built-in script that performs a similar transformation.

Write a custom script and call it from the playbook.

A playbook must enrich an IP address with geo-location data using a third-party API. The API is not a standard XSOAR integration. What should the developer do to incorporate this enrichment?

Use the 'CreateNewIncident' command to create an incident with the API data.

Use the 'Set' command to manually enter the geo-location data.

Use the 'IPReputation' script to get geo-location data.

Use the 'HTTP' built-in script to call the API and parse the response.

In XSOAR playbook development, what is the primary difference between a built-in command and a built-in script?

Commands are used for integrations, while scripts are used for internal logic.

Commands are always faster than scripts.

Commands can only be used in playbooks, while scripts can be used anywhere.

Commands are defined by integrations, while scripts are standalone pieces of code.

Palo Alto NetworksCertified XSOAR Engineer

Domain 3Objective 7

3.7 Identify and Describe Built-Ins, Commands, and Scripts XSOAR-ENGINEER Practice Questions (Page 1)

Part of the Playbook Development domain, which accounts for 30% of the XSOAR-ENGINEER exam.

8questions here

2free pages

3concepts

30%of the exam

Questions 1–5

1application · medium
A playbook needs to delete a context key that is no longer needed to avoid confusion in later tasks. Which built-in command should be used?
Select an answer first
2application · medium
A playbook needs to perform a complex data transformation that involves multiple steps and conditional logic, and this logic will be reused in several other playbooks. The transformation is not available as a built-in command or script. What should the developer do?
Select an answer first
3application · medium
A playbook must enrich an IP address with geo-location data using a third-party API. The API is not a standard XSOAR integration. What should the developer do to incorporate this enrichment?
Select an answer first
4foundation · easy
In XSOAR playbook development, what is the primary difference between a built-in command and a built-in script?
Select an answer first
5foundation · easy
Which built-in command would you use in a playbook to retrieve the value of a context key?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XSOAR-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “XSOAR-ENGINEER” is a trademark of its owner, used for identification only.

3.7 Identify and Describe Built-Ins, Commands, and Scripts XSOAR-ENGINEER Practice Questions (Page 1)

Questions 1–5

A playbook needs to delete a context key that is no longer needed to avoid confusion in later tasks. Which built-in command should be used?

A playbook needs to perform a complex data transformation that involves multiple steps and conditional logic, and this logic will be reused in several other playbooks. The transformation is not available as a built-in command or script. What should the developer do?

A playbook must enrich an IP address with geo-location data using a third-party API. The API is not a standard XSOAR integration. What should the developer do to incorporate this enrichment?

In XSOAR playbook development, what is the primary difference between a built-in command and a built-in script?

Which built-in command would you use in a playbook to retrieve the value of a context key?

Keep studying — Playbook Development