Palo Alto Networks XSOAR-Engineer Exam - Topic 2 Question 8 Discussion

Actual exam question for Palo Alto Networks's XSOAR-Engineer exam

Question #: 8
Topic #: 2

[All XSOAR-Engineer Questions]

What is the correct expression to use when filtering only PDF files?

AUse File.Extension that does not equal (string comparison) PDF

BUse File.Name contains PDF

CUse File.Extension contains (general) PDF

DUse File.Extension equals (string comparison) PDF

Show Suggested Answer

Suggested Answer: D

by Selma at Mar 31, 2026, 11:21 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

20 days ago

I think B is better, it checks the name too.

upvoted 0 times

...

25 days ago

Definitely D, that's the right way to filter by extension.

upvoted 0 times

...

2 months ago

I remember we discussed that extensions should be checked with "equals," so I think D is definitely the right choice!

upvoted 0 times

...

2 months ago

I’m a bit confused about the difference between "equals" and "contains." I might lean towards D, but I could be wrong.

upvoted 0 times

...

2 months ago

I feel like we practiced something similar, and I thought "contains" was more for searching within names, not extensions.

upvoted 0 times

...

2 months ago

I think I remember that filtering usually involves checking for equality, so maybe it's D? But I'm not completely sure.

upvoted 0 times

...