Amazon
Avaya
Cisco
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL
Juniper
Microsoft
NVIDIA
Okta
Palo Alto Networks
Salesforce
SAP
ServiceNow
All Vendors
  1. Home
  2. Palo Alto Networks
  3. XSOAR-Engineer

Palo Alto Networks XSOAR-Engineer Exam (page: 1)
Palo Alto Networks XSOAR Engineer
Updated on: 29-Mar-2026

Viewing Page 1 of 21
XSOAR-Engineer PDF 156 Questions

Which two advanced attributes can be applied to incident fields when editing? (Choose two.)

  1. Set a field trigger script
  2. Associate to an incident type
  3. Change field type
  4. Change field name

Answer(s): A,B


Reference:

https://docs.servicenow.com/bundle/quebec-it-service- management/page/product/incident- management/reference/incident-management- properties.html



Given an incident with three files, how could the name of the second file be referenced?

  1. ${Files.[2].Name}
  2. ${Files.Name.[2]}
  3. ${File.[1].Name}
  4. ${File.Name.[1]}

Answer(s): D



Which component can be part of a load balancing group?

  1. Distributed database
  2. D2 agent
  3. Engine
  4. Load balancing server

Answer(s): C


Reference:

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar- admin/engines/understand- demisto-engines.html



Which method accesses a field called `User Mail' in a playbook?

  1. ${incident.usermail}
  2. ${incident.User Mail}
  3. ${incident.UserMail}
  4. ${usermail}

Answer(s): A



A SOC manager built a dashboard and would like to share the dashboard with other team members. How would the SOC manager create a dashboard that meets this requirement?

  1. Manually share the dashboard through user emails
  2. Dashboard is shared to all XSOAR users
  3. Propagate the dashboard based on SAML authentication
  4. Dashboard is shared to all XSOAR users in a selected role

Answer(s): D


Reference:

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoar- admin/dashboards/share- a-dashboard.html



Which two methods will allow data to be saved in incident fields within a playbook? (Choose two.)

  1. setFields
  2. Field mapping
  3. setIncident
  4. Layout inline editing

Answer(s): B,C



DRAG DROP (Drag and Drop is not supported)

Match the action with the most appropriate playbook task type.

  1. See Explanation for the Answer.

Answer(s): A

Explanation:



https://www.jaacostan.com/2021/02/palo-alto-cortex-xsoar-playbook-icons.html



Which built-in automation/command cab be used to change an incident's type?

  1. setIncident
  2. Set
  3. GetFieldsByIncidentType
  4. modifyIncidentFields

Answer(s): A


Reference:

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar- admin/incidents/incidents- management/incident-fields/field-trigger-scripts.html



Viewing Page 1 of 21



Share your comments for Palo Alto Networks XSOAR-Engineer exam with other users:

Saeed 11/7/2023 3:14:00 AM

looks a good platform to prepare az-104
Anonymous


Matiullah 6/24/2023 7:37:00 AM

want to pass the exam
Anonymous


SN 9/5/2023 2:25:00 PM

good resource
UNITED STATES


Zoubeyr 9/8/2023 5:56:00 AM

question 11 : d
FRANCE


User 8/29/2023 3:24:00 AM

only the free dumps will be enough for pass, or have to purchase the premium one. please suggest.
Anonymous


CW 7/6/2023 7:37:00 PM

good questions. thanks.
Anonymous


Farooqi 11/21/2023 1:37:00 AM

good for practice.
INDIA


Isaac 10/28/2023 2:30:00 PM

great case study
UNITED STATES


Malviya 2/3/2023 9:10:00 AM

the questions in this exam dumps is valid. i passed my test last monday. i only whish they had their pricing in inr instead of usd. but it is still worth it.
INDIA


rsmyth 5/18/2023 12:44:00 PM

q40 the answer is not d, why are you giving incorrect answers? snapshot consolidation is used to merge the snapshot delta disk files to the vm base disk
IRELAND


Keny 6/23/2023 9:00:00 PM

thanks, very relevant
PERU


Muhammad Rawish Siddiqui 11/29/2023 12:14:00 PM

wrong answer. it is true not false.
SAUDI ARABIA


Josh 7/10/2023 1:54:00 PM

please i need the mo-100 questions
Anonymous


VINNY 6/2/2023 11:59:00 AM

very good use full
Anonymous


Andy 12/6/2023 5:56:00 AM

very valid questions
Anonymous


Mamo 8/12/2023 7:46:00 AM

will these question help me to clear pl-300 exam?
UNITED STATES


Marial Manyang 7/26/2023 10:13:00 AM

please provide me with these dumps questions. thanks
Anonymous


Amel Mhamdi 12/16/2022 10:10:00 AM

in the pdf downloaded is write google cloud database engineer i think that it isnt the correct exam
FRANCE


Angel 8/30/2023 10:58:00 PM

i think you have the answers wrong regarding question: "what are three core principles of web content accessibility guidelines (wcag)? answer: robust, operable, understandable
UNITED STATES


SH 5/16/2023 1:43:00 PM

these questions are not valid , they dont come for the exam now
UNITED STATES


sudhagar 9/6/2023 3:02:00 PM

question looks valid
UNITED STATES


Van 11/24/2023 4:02:00 AM

good for practice
Anonymous


Divya 8/2/2023 6:54:00 AM

need more q&a to go ahead
Anonymous


Rakesh 10/6/2023 3:06:00 AM

question 59 - a newly-created role is not assigned to any user, nor granted to any other role. answer is b https://docs.snowflake.com/en/user-guide/security-access-control-overview
Anonymous


Nik 11/10/2023 4:57:00 AM

just passed my exam today. i saw all of these questions in my text today. so i can confirm this is a valid dump.
HONG KONG


Deep 6/12/2023 7:22:00 AM

needed dumps
INDIA


tumz 1/16/2024 10:30:00 AM

very helpful
UNITED STATES


NRI 8/27/2023 10:05:00 AM

will post once the exam is finished
UNITED STATES


kent 11/3/2023 10:45:00 AM

relevant questions
Anonymous


Qasim 6/11/2022 9:43:00 AM

just clear exam on 10/06/2202 dumps is valid all questions are came same in dumps only 2 new questions total 46 questions 1 case study with 5 question no lab/simulation in my exam please check the answers best of luck
Anonymous


Cath 10/10/2023 10:09:00 AM

q.112 - correct answer is c - the event registry is a module that provides event definitions. answer a - not correct as it is the definition of event log
VIET NAM


Shiji 10/15/2023 1:31:00 PM

good and useful.
INDIA


Ade 6/25/2023 1:14:00 PM

good questions
Anonymous


Praveen P 11/8/2023 5:18:00 AM

good content
UNITED STATES