2.4 Identify and Describe Incident Creation Methods XSOAR-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A development team wants to create incidents from a CI/CD pipeline when a build fails. They plan to use the XSOAR API. What is required to authenticate and send the incident data?

   • AAn OAuth2 token from the identity provider
   • BAn API key and a POST request to the /incident endpoint with the incident payload
   • CA webhook URL and a secret token
   • DA username and password in the request header
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is a valid method for creating an incident in XSOAR?

   • AOnly through the built-in incident generator
   • BOnly through email ingestion
   • COnly through the XSOAR API
   • DManually through the XSOAR user interface
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a webhook in the context of XSOAR incident creation?

   • AAn HTTP endpoint that receives data from external systems to create incidents
   • BA type of integration that fetches data from a database
   • CA method for sending emails from XSOAR
   • DA tool for debugging playbooks
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a common use case for creating a sub-incident from a playbook?

   • ATo test the playbook's performance
   • BTo bypass the incident creation approval process
   • CTo break down a complex incident into smaller, manageable tasks
   • DTo increase the number of incidents for reporting purposes
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How can a playbook create a sub-incident in XSOAR?

   • ABy manually creating an incident from the UI
   • BBy sending an email to the XSOAR mailbox
   • CBy using the 'Create Incident' task in the playbook
   • DBy using the 'Fetch Incidents' integration
   Reveal Solution Discussion Select an answer first