Given an incident with three files, how could the name of the second file be referenced?
What can be added to offload integration instance processing from the main server?
An analyst wants to run a script to remove usernames from an incident before the incident becomes active in XSOAR. How can this be achieved?
An organization has recently acquired another company as its subsidiary. The subsidiary has its infrastructure on AWS cloud as illustrated in the image below:
The organization wants to use the mail server location on the subsidiary's cloud to send emails. Without acquiring additional licenses, which XSOAR component can fulfill the requirement?
Which two input requirements are needed to train a machine learning model? (Choose two.)
The code snippet below is from the fetch command of an integration instance configured to run on the server.
demisto.debug(f"(len(incidents)} events fetched")
Where is the output from the snippet located when the instance runs an automatic fetch?.
Which three types of information are displayed on the incident Quick View? (Choose three.)
Which set of trigger options is available to start a job when a new instance is created?.
What is the default configuration for indicator auto-extraction when incidents are created?
TESTED 14 Dec 2025
