After executing the DeleteContext automation with all=yes argument, how would the context data of an incident present?
Which Marketplace content pack will allow sharing of threat intelligence in STIX format?.
What can you use to assign a layout, field, and playbook to an incoming incident?
An analyst runs the following command in a playbook task:
!ip ip=1.1.1.1
Which extraction mode needs to be enabled on the Advanced tab of the playbook task to synchronously extract indicators from the results of this command?
A large number of incidents were deleted by mistake.
Which two architecture components can be used to recover the lost data? (Choose two.)
Which three scripting languages can an engineer use to write XSOAR automations? (Choose three.)
When creating an incident layout section, it is best to place long field values within which of the following?
What is the most effective way to correlate multiple raw events coming from a SIEM and link them together?
TESTED 14 Dec 2025
