An administrator has noticed that an incident fetch has failed, causing several internal workflows to be backed up. The administrator would like to receive notifications the next time the incident fetch fails.
How can they achieve this?
A.
Create a custom playbook that sends an email each time the fetch fails.
B.
Create a new integration that monitors the incident fetch and sends an email if the fetch fails.
C.
Schedule a job that runs and monitors incidents in XSOAR that will send an email if there are no new incidents.
D.
Add a server config to notify when incident fetch fails.
D is correct
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Administrator-Guide/Receive-Notification-on-an-Incident-Fetch-Error
In the integration instance, ensure that you select the Fetch Incidents checkbox.
Select Settings → About → Troubleshooting → Add Server Configuration.
Add the following keys and values:
Key: module.health.notification.users
List of names in CSV format, for example
Value: user1,user2,user3.
Key: message.ignore.failedFetchIncidents
Value: false
Should be D
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.6/Cortex-XSOAR-Administrator-Guide/Fetch-Incidents-From-an-Integration-Instance
upvoted 4 times
...
This section is not available anymore. Please use the main Exam Page.PCSAE Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
gabriel.alarcon0730
8 months, 3 weeks agopiipo
1 year, 1 month agonews088
1 year, 6 months agofranko_72
1 year, 9 months agoKaiW
1 year, 12 months ago