2021 Free Palo Alto Networks PCSAE Certification Questions To Test Online

1. Which three authentication methods are supported when logging into XSOAR? (Choose three.)

OTP token

User name and password

SAML

Active Directory authentication

RADIUS

2. Which three options can be defined in the layout settings? (Choose three.)

Set of fields to present

Permission to view the tab based on ‘Users’

Permission to view the tab based on ‘Roles’

Delete built-in tabs including the war room

Dynamic sections

3. In which two scenarios would it be appropriate to implement a loop for a sub-playbook? (Choose two.)

In repetitive process flows to iterate for each playbook input

When continuously ingesting incidents from third-party systems

In repetitive process flows with no more than 10 loops

In repetitive processes that requires sub-playbook re-execution

4. What are two common use cases for conditional tasks? (Choose two.)

They are used for branching paths in a playbook

They are used to interact with users through survey functionality

They are used to determine which incident will be executed

They are used for sending a specific QUESTION NO: to a person or team

5. In which two options can an automation script be executed? (Choose two.)

Engine

Integration

War room

Playbook

6. What is the default task type when creating an empty task?

Standard (Manual)

Conditional

Section header

Standard (Automated)

7. Which two components have their own context data? (Choose two.)

Sub-playbook

Task

Field

Incident

8. Which two features does XSOAR offer to help recover from a server failure? (Choose two.)

Live backup (disaster recovery)

Distributed database

Backup data to XSOAR engines

Local backup

9. Which two causes may be occurring if an integration test is working, but the integration is not fetching incidents? (Choose two.)

The ’Fetches Incidents’ option may not have been enabled

There are no new events from the external service

The first fetch should be manually triggered to start the fetching process

It can take up to 1-hour before incidents are initially fetched

10. An engineer would like to change an incident’s SLA according to the severity field changes.

How can the engineer achieve this task?

Use a field trigger script

Use a field display script

Create a job that queries for incident severity changes

Change the SLA manually every time the severity changes

Leave a Reply Cancel reply