In Cortex XSOAR, which statement best describes the role of threat intelligence feeds?

They are dashboards that display the status of all integrated security tools.

They are built-in playbooks that automatically remediate threats without user intervention.

They are collections of indicators from external sources that can be ingested to provide context for investigations.

They are encryption keys used to secure communication between XSOAR and external services.

How can reputation scores influence alerting and response in XSOAR?

They are used to automatically delete indicators with low scores

They are used to encrypt indicators with high scores

They are only used for display purposes and have no effect on automation

They can be used in playbook conditions to trigger different response actions based on the indicator's score

Which of the following is a mechanism XSOAR provides for sharing threat intelligence with external systems?

Printing indicators to PDF and sharing via FTP

Copying indicators to the clipboard for manual paste

Sending indicators via email to all users

Exporting indicators in STIX/TAXII format

In Cortex XSOAR, where are ingested threat intelligence indicators (IOCs) stored for management and use?

In the Indicators database, which is part of the XSOAR platform's data store

In the system's local file system as plain text files

In the configuration file of the integration that provided the feed

In the incident attachment folder of each related incident

Palo Alto NetworksCertified XSOAR Engineer

Domain 5Objective 1

5.1 Identify and Describe Threat Intelligence Features XSOAR-ENGINEER Practice Questions (Page 1)

Part of the Threat Intelligence Management domain, which accounts for 18% of the XSOAR-ENGINEER exam.

26questions here

6free pages

7concepts

18%of the exam

Questions 1–5

1foundation · easy
In Cortex XSOAR, which statement best describes the role of threat intelligence feeds?
Select an answer first
2foundation · easy
Which XSOAR component is primarily used to automate threat intelligence workflows?
Select an answer first
3foundation · easy
How can reputation scores influence alerting and response in XSOAR?
Select an answer first
4foundation · easy
Which of the following is a mechanism XSOAR provides for sharing threat intelligence with external systems?
Select an answer first
5foundation · easy
In Cortex XSOAR, where are ingested threat intelligence indicators (IOCs) stored for management and use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XSOAR-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “XSOAR-ENGINEER” is a trademark of its owner, used for identification only.