Palo Alto Networks PCSAE Exam Practice Test Instant Access

Question 1

Which two functions in XSOAR are incident types used for? (Choose two.)

ATo run dedicated playbooks for different event types

BTo classify events ingested from various sources into the relevant types

CTo classify indicators extracted in XSOAR incidents to their respective types

DTo facilitate role based access to XSOAR incidents

Answer : B, C

Question 2

What is the function of timer SLA fields in Cortex XSOAR?

ATo track SLA breaches per playbook

BTo run a script that executes on SLA assignment

CTo automatically alert the analyst on SLA breach

DTo count the time between one or more tasks

Answer : C

Question 3

Which field type provides an interactive and editable display of table-based data?

AHTML

BGrid (table)

CMarkdown

DMulti Select

Answer : B

Question 4

When developing the playbook, which of the following can be used by a XSOAR Administrator?

AThe Debugger panel to test data with one of last five incidents. This will affect the incident's original incident data.

BContext data from existing incidents by exporting the YAML data from incidents and importing it to playbook editor.

CDebugger panel and XML data from a similar incident with New Mock Incident. This will not affect the incidents original incident data.

DThe Debugger panel to test data with one of last fifty incidents. This will not affect the incident's original incident data.

Answer : C

Question 5

Which three types of information are displayed on the incident Quick View? (Choose three.)

AIndicators and relationships

BTimeline information

CEvidence Board

DContext data

EIncident severity

Answer : A, B, C

Question 6

After executing the DeleteContext automation with all=yes argument, how would the context data of an incident present?

AAll the data, including the incident key will be deleted, and the context data will be completely empty.

BNo difference, the automation cannot be executed manually.

CAll context data, including custom incident fields will be deleted, system incident fields will remain.

DAll context data, except the incident key will be deleted.

Answer : D

Question 7

What is used to trigger playbooks automatically based on the classification of an incident?

AIndicator type

BIncoming mapper

CIncident types

DIntegration configuration

Answer : C

Palo Alto Networks PCSAE Palo Alto Networks Certified Security Automation Engineer Exam Practice Test