XSIAM-ENGINEER: Palo Alto Networks Certified XSIAM Engineer

By Palo Alto Networks · Question Mode

QuestionQ19

VerifiedIntegration and Automation

A Cortex XSIAM engineer is creating a playbook that uses reputation commands, such as !ip, to enrich and analyze indicators.

Which statement applies to using reputation commands in this scenario?

Explanation

Reputation commands such as !ip require a configured and enabled reputation integration instance. If no required instance is available, the command cannot be used successfully. Extraction set to None does not disable the enrichment mapping flow; it affects whether enrichment data is saved to the indicator rather than only to context.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!