1.5 Identify and Describe Configuration and Troubleshooting Integration Instances XSOAR-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company has an XSOAR environment with multiple integration instances. One instance, used for threat intelligence, is failing intermittently. The logs show 'Timeout' errors, but the integration works when tested manually. The instance is configured with a proxy, and the proxy server is known to have occasional high latency. The administrator needs to ensure reliable operation. What is the best course of action?

   • AIncrease the timeout value for the integration instance to accommodate proxy latency.
   • BMonitor the proxy performance and coordinate with the network team to ensure it meets the integration's requirements.
   • CImplement a retry mechanism in the integration or playbook to handle transient timeouts.
   • DDisable the proxy and use a direct connection to reduce latency.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An XSOAR administrator is troubleshooting a Microsoft Teams integration instance that fails to send messages. The instance logs show an authentication error. The administrator has verified that the credentials are correct. What should they check next?

   • ACheck the integration health page for any status indicators.
   • BVerify that the integration has the correct permissions and scopes in Microsoft Teams.
   • CRestart the XSOAR server to refresh the integration session.
   • DIncrease the timeout for the integration instance.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   On the Integration Health page, what does a red status indicator typically signify for an integration instance?

   • AThe instance is not installed
   • BThe instance is experiencing errors or is not functioning correctly
   • CThe instance is disabled
   • DThe instance is active and healthy
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   An organization is configuring a new integration instance in XSOAR that requires a client certificate for authentication. The certificate is stored in a PKCS#12 file. The administrator needs to configure the instance to use the certificate. What is the correct approach?

   • APlace the certificate file on the XSOAR server and reference the file path in the integration parameters.
   • BUse the XSOAR API to upload the certificate and then reference it in the integration.
   • CUpload the PKCS#12 file as a credential in the integration parameters.
   • DConvert the PKCS#12 file to PEM and paste the contents into a text parameter.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security operations team is configuring a new ServiceNow integration instance in XSOAR. The instance must connect through a corporate HTTP proxy that requires authentication. During the initial test, the connection fails with a timeout error. Which configuration step should the team perform first?

   • ADisable the proxy settings and use a direct connection to avoid authentication issues.
   • BEnable the 'Use system proxy settings' option and configure the proxy credentials in the integration parameters.
   • CRun the '!servicenow-get-credentials' command to verify the credentials are correct.
   • DIncrease the timeout value in the integration parameters to allow more time for the connection.
   Reveal Solution Discussion Select an answer first