What happens if both a Classifier and Incident Type are configured in an integration instance's settings?

AThe administrator will receive a notification that there is both a Classifier and Incident Type set for that integration instance.

BThe Incident Type will be ignored, and incoming incidents will be classified according to the Classifier.

CThe Classifier will be ignored, and incoming incidents will be classified according to the Incident Type.

DBoth the Classifier and Incident Type will classify incoming incidents.

Answer : D

An analyst wants to run a script to remove usernames from an incident before the incident becomes active in XSOAR. How can this be achieved?

ARun an automation script in the Playground to remove usernames from the incident.

BCreate a pre-processing rule that runs an automation script to remove usernames from the incident as it comes into XSOAR.

CRun an automation script on the XSOAR server to remove usernames from the incident.

DCreate a playbook task to remove the usernames from the incident.

Answer : B

When uploading content, which two options could the upload include? (Choose two.)

AIndicators

BIncidents

CReports

DFields

Answer : A, B

On the System Diagnostics page, what is the default minimum size for a Work Plan to be considered big?

A2MB

B3MB

C1MB

D5MB

Answer : C

In which two ways can data be transferred between playbooks and sub-playbooks? (Choose two.)

AInputs and outputs

BThrough integration context

CAutomatically extracted by sub-playbooks

DFrom context data, if context is shared globally

Answer : A, D

Free Practice Questions for Palo Alto Networks XSOAR-Engineer Exam