XSOAR-Engineer Playbook Development Practice Question
An XSOAR Engineer wants to extract specific artifacts from a sub-playbook and ensure they are promoted to the parent incident's main context. How is context scoping handled between parent and sub-playbooks by default?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Sub-playbook outputs must be explicitly mapped in the sub-playbook task configuration under 'Outputs' to merge into the parent context.
By default, sub-playbooks run in their own scoped context namespace, but output keys can be mapped back to the parent playbook's context using the sub-playbook task configuration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Sub-playbooks share the exact same global context without any isolation or scoping.
Why it's wrong here
XSOAR sub-playbooks provide context scoping to prevent variable collision.
- ✓
Sub-playbook outputs must be explicitly mapped in the sub-playbook task configuration under 'Outputs' to merge into the parent context.
Why this is correct
Explicit output mapping ensures keys generated inside a sub-playbook are properly passed to the parent playbook context.
- ✗
All sub-playbook context keys automatically overwrite parent context keys with identical names without mapping.
Why it's wrong here
Sub-playbooks do not automatically overwrite parent context unless explicitly mapped or using global keys.
- ✗
Context promotion requires a dedicated python script usingdemisto.setContext() with the 'parent' flag.
Why it's wrong here
Context mapping is handled natively in the playbook UI without needing custom demisto API flags.
About these practice questions
This XSOAR-Engineer question is part of Courseiva's 219-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This XSOAR-Engineer practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XSOAR-Engineer exam.