Free Preparation Discussions
MENU
Palo Alto Networks XSOAR-Engineer Exam - Topic 5 Question 7 Discussion
Topic #: 5
When using the playbook debugger, what may be the cause of a starred incident missing from the Test Data selections?.
The XSOAR Playbook Debugger allows engineers to simulate playbook behavior using existing incidents as sample data. The documentation explicitly states that only open incidents appear within the debugger's Test Data selection list. Closed incidents are removed from the selectable list because the debugger cannot execute against non-active incident states.
Starring an incident does not affect debugger availability; the star is a user-level convenience for bookmarking. RBAC restrictions (B) could hide an incident in general UI contexts but not selectively from the debugger. Incorrect incident type (D) also does not prevent selection as long as the incident is open.
Therefore, if a starred incident does not appear as a debugging option, the most common and documented reason is that the incident has been closed, and closed incidents cannot be used as debugger input. This aligns with option A.
Vince
17 days agoAlverta
23 days agoJeniffer
28 days agoCandra
1 month agoHortencia
1 month agoEdwin
1 month agoShawana
2 months agoYun
2 months agoDoug
2 months agoAretha
2 months agoAlexia
2 months agoQuentin
2 months ago