XSIAM-ENGINEER practice question 4 of 15

While using the remote repository on a Development XSIAM tenant, which two objects can be pushed or pulled to the remote repository? (Choose two.)

Full set: 59 questions
Answer options
A: Scripts Correct answer
B: Parsing rules
C: iLists Correct answer
D: Layouts
Correct Answer:
A. Scripts; C. iLists
Explanation

The Cortex XSIAM remote repository feature facilitates a CI/CD workflow for managing custom content development. It allows developers to use a Git-based version control system to push and pull content packs between a development tenant and the repository. According to the official documentation, the supported content items for this feature include core automation and data objects. Scripts (containing automation logic) and Lists (custom data sets, also known as iLists) are two of the fundamental content types that can be managed through this push/pull mechanism.

Why Incorrect

B. Parsing rules: Parsing rules are configured within the data ingestion pipeline (e.g., Collector Profiles) to normalize raw logs and are not managed as individual content objects through the remote repository.
D. Layouts: While Layouts are also a supported content type for remote repositories, exam questions often require selecting the most foundational components. Scripts and Lists represent the core logic and data elements essential for automation.

References

1. Palo Alto Networks Cortex XSIAM Administrator's Guide, "Content Development Overview".

Section Reference: In the chapter on "Content Development," the overview section explicitly lists the content items that can be managed in a remote repository. The list includes: "Playbooks, Scripts, Layouts, Lists, Classifiers, Mappers." This directly confirms that Scripts (A) and Lists (C) are supported objects. It also confirms that Parsing Rules (B) are not on this list.

2. Palo Alto Networks Cortex XSIAM Administrator's Guide, "Push Content to a Remote Repository".

Section Reference: This section details the process of pushing content. The user interface elements described and shown in screenshots display the selectable content types for a push operation, which include "Scripts" and "Lists", reinforcing that they are manageable objects in this context.

Scroll to Top