Rearrange the steps into the correct order for modifying an incident layout.
Select and Place:
A General Purpose Dynamic Section can be added to which two layouts for incident types? (Choose two)
A. "Close" Incident Form
B. Incident Summary
C. Incident Quick View
D. "New"/Edit" Incident Form
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
A. cc-xnet50.traps.paloaltonetworks.com
B. hc-xnet50.traps.paloaltonetworks.com
C. cc-xnet.traps.paloaltonetworks.com
D. cc.xnet50traps.paloaltonetworks.com
E. xnettraps.paloaltonetworks.com
F. ch-xnet.traps.paloaltonetworks.com
When analyzing logs for indicators, which are used for only BIOC identification'?
A. observed activity
B. artifacts
C. techniques
D. error messages
What are process exceptions used for?
A. whitelist programs from WildFire analysis
B. permit processes to load specific DLLs
C. change the WildFire verdict for a given executable
D. disable an EPM for a particular process
Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?
A. Agent Configuration
B. Device Control
C. Device Customization
D. Agent Management
The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.)
A. The modified scnpt was run in the wrong Docker image
B. The modified script required a different parameter to run successfully.
C. The dictionary was defined incorrectly in the second script.
D. The modified script attempted to access a dictionary key that did not exist in the dictionary named "data"
How many use cases should a POC success criteria document include?
A. only 1
B. 3 or more
C. no more than 5
D. no more than 2
What are two manual actions allowed on War Room entries? (Choose two.)
A. Mark as artifact
B. Mark as scheduled entry
C. Mark as note
D. Mark as evidence
Given the integration configuration and error in the screenshot what is the cause of the problem? [missing the exhibits]
A. incorrect instance name
B. incorrect Username and Password
C. incorrect appliance port
D. incorrect server URL
