Questions

Where can you find the execution log of an Alert?

 

Select one that applies, and then click Submit.

• Action
• Problem
• Chronicle Blog
• Case

 

What allows you to create repetitive steps within a workflow and put together a string of inputs and outputs?

 

Select one that applies, and then click Submit.

• Blocks
• Actions
• Events
• Playbooks

 

How can a manual action within a playbook be identified?

 

Select one that applies, and then click Submit.

• The purple color
• Hand symbol
• “M” letter
• “MAN” letters

 

Where can you check all the Active System Modules?

 

Select one that applies, and then click Submit.

• Integrations
• Permissions
• Ontology
• License Management

 

What is the difference between Jobs and Connectors within Chronicle Security Orchestration, Automation, and Response (SOAR)?

 

Select one that applies, and then click Submit.

• Connectors notify us of any errors in the alert ingestion process. Jobs notify if a specific job has failed at least three times (sends a notification for each specific job once every three hours).
• Connectors are used to ingest cases into the platform. Jobs support healthcheck and synchonization tasks.
• Jobs are used to ingest cases into the platform. Connectors support healthcheck and synchonization tasks.
• Connectors include tasks or actions to be performed by the playbook. Jobs are notified if a specific action has failed at least three times across all cases it was performed in.

 

Who typically has sufficient rights to turn off the “simulator” mode?

 

Select one that applies, and then click Submit.

• Security Operations Center (SOC) Analyst
• Assistant
• Admin