Online Access Free XSIAM-Engineer Practice Test

Which action will prevent the automatic extraction of indicators such as IP addresses and URLs from a script's output?

• A.Use 'AutoExtract': Falsein the script.
• B.Add 'IgnoreAutoExtract': Trueto the script.
• C.Add 'ExtractIndicators': Falseto the script.
• D.Set 'IndicatorExtraction': Nonein the script.

During a new Cortex XSIAM deployment, a user consistently experiences timeout sessions while trying to connect to the agent through Live Terminal, even though the firewall engineer has confirmed that all source IP addresses, port 443, and destinations are allowed.
What could be causing these persistent timeout issues?

• A.User does not have administrative privileges on the managed endpoint.
• B.Live Terminal feature is not supported on the current OS.
• C.SSL Decryption is currently being used to inspect the underlying traffic.
• D.NTP is not synchronized with the server time.

A CISO has asked an engineer to create a custom dashboard in Cortex XSIAM that can be filtered to show incidents assigned to a specific user.
Which feature should be used to filter the incident data in the dashboard?

• A.Report template to set the incident user filter
• B.Incident summary view to filter by user
• C.Filters and inputs in the custom dashboard
• D.Visualization filter options in the widget configuration

A file for a support exception that needs to be updated locally on a Linux endpoint has been supplied.
Which cytool command will upload this support exception file to the endpoint?

• A.cytool import suex -path </local/file/path>
• B.cytool upload suex -file </local/file/path>
• C.cytool import suexfile -path </local/file/path>
• D.cytool upload suexfile -target </local/file/path>

A vulnerability analyst asks a Cortex XSIAM engineer to identify assets vulnerable to newly reported zero-day CVE affecting the "ai_app" application and versions 12.1, 12.2, 12.4, and 12.5.
Which XQL query will provide the required result?

• A.
• B.
• C.
• D.