Palo Alto Networks XSOAR-Engineer Actual Exam Questions

Last updated on Nov. 26, 2025.

Topic 1 - Exam A

Question #1 Topic 1

Which two behaviors occur while an incident is closed? (Choose two.)

  • A. Playbook is marked as complete.
  • B. Commands cannot be executed in the War Room.
  • C. Timers can no longer run.
  • D. Running timers are in a paused state.
Reveal Solution Hide Solution   Discussion   1

Correct Answer: AB 🗳️

Question #2 Topic 1

An engineer must create a playbook task which asks a user a single question to determine the next step in the playbook flow.
Which type of task will accomplish this goal?

  • A. Standard task using manual task settings
  • B. Data collection task using the task option
  • C. Conditional task using the ask option
  • D. Data collection task using the generated link option
Reveal Solution Hide Solution   Discussion  

Correct Answer: C 🗳️

Question #3 Topic 1

What determines the current verdict for an indicator when multiple sources provide different reliability scores and verdicts?

  • A. Verdict provided by the most recently updated source
  • B. Average verdict score from all sources
  • C. Verdict provided by the source with the highest reliability score
  • D. Highest severity verdict from all sources
Reveal Solution Hide Solution   Discussion  

Correct Answer: C 🗳️

Question #4 Topic 1

The code snippet below is from the fetch command of an integration instance configured to run on the server. demisto.debug(f"(len(incidents)} events fetched")
Where is the output from the snippet located when the instance runs an automatic fetch?

  • A. Incident labels
  • B. Platform Log bundle
  • C. Integration Logs table
  • D. War Room entry
Reveal Solution Hide Solution   Discussion  

Correct Answer: C 🗳️

file Viewing page 1 out of 13 pages.
Viewing questions 1-4 out of 50 questions
Next Questions
Browse atleast 50% to increase passing rate cup
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Loading ...