1.5 Identify and Describe Configuration and Troubleshooting Integration Instances XSOAR-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which built-in feature in XSOAR allows you to test an integration instance's configuration without running a full playbook?

   • AThe 'Validate' button on the marketplace
   • BThe 'Test' button on the integration instance configuration screen
   • CThe 'Run' button on the playbook editor
   • DThe 'Debug' button on the incident page
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security team has configured a new Palo Alto Networks Cortex XDR integration instance. They want to verify that the instance can retrieve alerts. What is the most efficient way to validate this?

   • AReview the integration logs for any errors.
   • BCheck the Integration Health page to see if the instance is active.
   • CCreate a test alert in Cortex XDR and see if it appears in XSOAR.
   • DRun the '!xdr-get-alerts' command with a filter for recent alerts.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   After configuring a new integration instance, what is the recommended way to validate that it can communicate with the external service?

   • ACheck the integration's documentation
   • BRestart the XSOAR server
   • CRun a test command from the instance's configuration page
   • DWait for the next scheduled playbook run
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A team has configured a new Splunk integration instance in XSOAR. Before deploying playbooks that rely on this integration, they want to validate that the instance can successfully query data. Which action should they take?

   • ARestart the XSOAR server to ensure the integration is loaded correctly.
   • BCheck the Integration Health page to see if the instance status is 'Active'.
   • CReview the integration logs for any error messages.
   • DRun the '!splunk-search' command with a simple query from the War Room.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An XSOAR administrator is troubleshooting an integration instance that was working yesterday but is now failing. The instance logs show a 'Connection refused' error. What is the most likely cause?

   • AThe API endpoint is temporarily down or unreachable.
   • BThe integration instance has been disabled.
   • CThe integration credentials have expired.
   • DThe XSOAR server's clock is out of sync.
   Reveal Solution Discussion Select an answer first