[Jul 27, 2021] PCSAE Dumps Full Questions - Exam Study Guide
Palo Alto Networks Certification Free Certification Exam Material from Test4Cram with 85 Questions
NEW QUESTION 28
Which two situations would an engineer consider when configuring classification and mapping for an incident type? (Choose two.)
- A. When adding a new analyst account to XSOAR
- B. When creating incidents from the XSOAR REST API
- C. When manually creating an incident from the UI
- D. When fetching many different incident types from a single mailbox
Answer: B,C
NEW QUESTION 29
Which two features does XSOAR offer to help recover from a server failure? (Choose two.)
- A. Distributed database
- B. Live backup (disaster recovery)
- C. Local backup
- D. Backup data to XSOAR engines
Answer: B,D
NEW QUESTION 30
An engineer asked for a specific command in an integration but the capability does not exist. The engineer decided to edit the existing integration by copying the integration and adding the needed commands.
What is the main concern when adding these commands?
- A. The integrations are locked and cannot be edited with additional commands
- B. The commands must return a proper result to the war room for the analysts to understand
- C. The custom integration will not be maintained and updated by XSOAR content team
- D. The code may not be written to XSOAR standards
Answer: A
NEW QUESTION 31
What is the default task type when creating an empty task?
- A. Section header
- B. Standard (Automated)
- C. Conditional
- D. Standard (Manual)
Answer: C
NEW QUESTION 32
Which XSOAR architecture would be recommended for Managed Security Service Providers (MSSP)?
- A. Multi-region
- B. Distributed database
- C. Dev-Prod
- D. Multi-tenant
Answer: D
NEW QUESTION 33
Which two methods will allow data to be saved in incident fields within a playbook? (Choose two.)
- A. Layout inline editing
- B. setIncident
- C. Field mapping
- D. setFields
Answer: B,C
NEW QUESTION 34
What can be added to offload integration instance processing from the main server?
- A. Engine
- B. Application server
- C. Database node
- D. Development server
Answer: C
NEW QUESTION 35
When uploading content, which two options could the upload include? (Choose two.)
- A. Fields
- B. Reports
- C. Indicators
- D. Incidents
Answer: C,D
NEW QUESTION 36
What does Script helper contain?
- A. Automation version history
- B. Automation timeout configuration
- C. Available commands
- D. Permission settings
Answer: C
NEW QUESTION 37
By default, which components does an XSOAR implementation include?
- A. All in one server
- B. XSOAR server, XSOAR engine
- C. Application server, distributed DB server, Backup server
- D. Application server, distributed DB server
Answer: D
NEW QUESTION 38
Incidents need to be filtered by all of the following criteria:
1.Status - Pending
2.Exclude Category - Job
3.Severity - High
4.Owner - None (No owner assigned)
5.Type - Phishing
6.Email Subject - "You have won a million dollars"
What is the correct query syntax for the above incident search filter?
- A. status=="Pending" && category!="job" && severity=="High" && owner=="None" && type=="Phishing" && emailsubject=="You have won a million dollars"
- B. status:Pending and -category:job and severity:High and owner:"" and type:Phishing and emailsubject:"You have won a million dollars"
- C. status:Pending or -category:job or severity:High or owner:"" or type:Phishing or emailsubject:"You have won a million dollars"
- D. Status:Pending and -Category:job and Severity:High and Owner:"" and Type:Phishing and Email Subject:You have won a million dollars
Answer: B
NEW QUESTION 39
Match the operations with the appropriate context.
Answer:
Explanation:
NEW QUESTION 40
Which built-in automation/command cab be used to change an incident's type?
- A. Set
- B. setIncident
- C. modifyIncidentFields
- D. GetFieldsByIncidentType
Answer: B
NEW QUESTION 41
What are two common use cases for conditional tasks? (Choose two.)
- A. They are used to determine which incident will be executed
- B. They are used for branching paths in a playbook
- C. They are used for sending a specific question to a person or team
- D. They are used to interact with users through survey functionality
Answer: A,B
NEW QUESTION 42
In which three locations can an engineer try to find information, when troubleshooting a failed integration instance error produced by the test button? (Choose three.)
- A. The playground war room
- B. The source code for an integration
- C. The log bundle
- D. The audit log
- E. The error message returned directly below the button
Answer: B,C,E
NEW QUESTION 43
......
Dumps Brief Outline Of The PCSAE Exam: https://www.test4cram.com/PCSAE_real-exam-dumps.html
Use Real PCSAE - 100% Cover Real Exam Questions: https://drive.google.com/open?id=1j_49tHwdrcXAtXAHd74mWjUlGTJYis3Y