Palo Alto Networks PCSAE Exam Practice Test Instant Access

Question 1

What does the outgoing mapper support?

AMirroring

BClassification

CDynamic fields

DPre-processing

Answer : D

Question 2

Select the correct incident life cycle on XSOAR.

APlanning > Incident Ingestion > Incident Creation > Mapping and Classification > Pre-processing > Playbook runs > Post-processing

BPlanning > Incident Ingestion > Pre-processing > Incident Creation > Mapping and Classification > Playbook runs > Post-processing

CPlanning > Incident Ingestion > Pre-processing > Mapping and Classification > Incident Creation > Playbook runs > Post-processing

DPlanning > Incident Ingestion > Mapping and Classification > Pre-processing > Incident Creation > Playbook runs > Post-processing

Answer : D

Question 3

An administrator wants to run an automation in the War Room to set the incident field "Description" to "Confirmed Phishing". Which command should they enter in the War Room CLI?

A!incidentSet description='Confirmed Phishing'

B/incidentSet description=Confirmed Phishing

C!setIncident description='Confirmed Phishing'

D/setIncident description=Confirmed Phishing

Answer : A

Question 4

Threat Intel search queries can be shared with which of the following? (Select 1)

AUsers defined in the platform (email or username)

BOther organizations via the Marketplace

CUsers outside XSOAR via email invite

DRoles defined in the platform

Answer : B

Question 5

An analyst runs the following command in a playbook task:

!ip ip=1.1.1.1

Which extraction mode needs to be enabled on the Advanced tab of the playbook task to synchronously extract indicators from the results of this command?

ASynchronous

BExtract

COut of band

DInline

Answer : D

Question 6

After executing the DeleteContext automation with all=yes argument, how would the context data of an incident present?

AAll the data, including the incident key will be deleted, and the context data will be completely empty.

BNo difference, the automation cannot be executed manually.

CAll context data, including custom incident fields will be deleted, system incident fields will remain.

DAll context data, except the incident key will be deleted.

Answer : D

Question 7

What is used to trigger playbooks automatically based on the classification of an incident?

AIndicator type

BIncoming mapper

CIncident types

DIntegration configuration

Answer : C

Palo Alto Networks PCSAE Palo Alto Networks Certified Security Automation Engineer Exam Practice Test