ExamGecko

PCSAE: Palo Alto Networks Certified Security Automation Engineer

Palo Alto Networks Certified Security Automation Engineer Exam Questions: 157
Palo Alto Networks Certified Security Automation Engineer   2.370 Learners
Take Practice Tests
Comming soon
PDF | VPLUS
This study guide should help you understand what to expect on the exam and includes a summary of the topics the exam might cover and links to additional resources. The information and materials in this document should help you focus your studies as you prepare for the exam.

Related questions

Incidents need to be filtered by all of the following criteria:

A.
Status – Pending
A.
Status – Pending
Answers
B.
Exclude Category – Job
B.
Exclude Category – Job
Answers
C.
Severity – High
C.
Severity – High
Answers
D.
Owner – None (No owner assigned)
D.
Owner – None (No owner assigned)
Answers
E.
Type – Phishing
E.
Type – Phishing
Answers
F.
Email Subject – “You have won a million dollars”What is the correct query syntax for the above incident search filter?
F.
Email Subject – “You have won a million dollars”What is the correct query syntax for the above incident search filter?
Answers
G.
status==“Pending“ && category!=”job” && severity==”High” && owner==”None” && type==”Phishing” && emailsubject==”You have won a million dollars”
G.
status==“Pending“ && category!=”job” && severity==”High” && owner==”None” && type==”Phishing” && emailsubject==”You have won a million dollars”
Answers
H.
Status:Pending and –Category:job and Severity:High and Owner:”” and Type:Phishing and Email Subject:You have won a million dollars
H.
Status:Pending and –Category:job and Severity:High and Owner:”” and Type:Phishing and Email Subject:You have won a million dollars
Answers
I.
status:Pending and –category:job and severity:High and owner:”” and type:Phishing and emailsubject:”You have won a million dollars”
I.
status:Pending and –category:job and severity:High and owner:”” and type:Phishing and emailsubject:”You have won a million dollars”
Answers
J.
status:Pending or –category:job or severity:High or owner:”” or type:Phishing or emailsubject:”You have won a million dollars”
J.
status:Pending or –category:job or severity:High or owner:”” or type:Phishing or emailsubject:”You have won a million dollars”
Answers
Suggested answer: C

Explanation:

Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoar-admin/cortexxsoar-overview/how-to-search-in-cortex-xsoar.html#idcd7fe505-c1c1-42f5-a698-08b5710196d3

asked 23/09/2024
Ahmed Otmani Amaoui
30 questions

On the System Diagnostics page, what is the default minimum size for a Work Plan to be considered big?

A.
2MB
A.
2MB
Answers
B.
3MB
B.
3MB
Answers
C.
1MB
C.
1MB
Answers
D.
5MB
D.
5MB
Answers
Suggested answer: C
asked 23/09/2024
Deshawn Sharpe
35 questions

Which three scripting languages can an engineer use to write XSOAR automations? (Choose three.)

A.
Python
A.
Python
Answers
B.
Perl
B.
Perl
Answers
C.
Go
C.
Go
Answers
D.
JavaScript
D.
JavaScript
Answers
E.
Powershell
E.
Powershell
Answers
Suggested answer: A, D, E

Explanation:

Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoaradmin/playbooks/ automations.html

asked 23/09/2024
Daniel williams
51 questions

A playbook task generates a report as HTML in the context data.

An engineer creates a custom indicator field of type "HTML" and adds the field to a section in a custom indicator layout. How can the engineer populate the HTML field in the indicator layout?

A.
Populate the custom indicator field with the built-in !SetIndicator command.
A.
Populate the custom indicator field with the built-in !SetIndicator command.
Answers
B.
Add HTML to a list using !setList and use it as an HTML template to populate the custom indicator field.
B.
Add HTML to a list using !setList and use it as an HTML template to populate the custom indicator field.
Answers
C.
Create a custom Indicator Mapper and populate the custom indicator field.
C.
Create a custom Indicator Mapper and populate the custom indicator field.
Answers
D.
Use the Mapping option in the playbook task that generates the HTML report to populate the custom indicator field.
D.
Use the Mapping option in the playbook task that generates the HTML report to populate the custom indicator field.
Answers
Suggested answer: D

Explanation:

Reference: https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.6/Cortex-XSOARAdministrator-Guide/Configure-the-HTML-Field

asked 23/09/2024
Billy Mitchell
29 questions

An XSOAR Engineer has developed a playbook and would like to contribute it to the XSOAR Marketplace to share with other users.

Which two options are available to the Engineer for contributing to the Marketplace? (Choose two.)

A.
Open a ticket with the XSOAR support team
A.
Open a ticket with the XSOAR support team
Answers
B.
Create a pull request directly on Github
B.
Create a pull request directly on Github
Answers
C.
Contribute through the XSOAR UI
C.
Contribute through the XSOAR UI
Answers
D.
Send an email to [email protected]
D.
Send an email to [email protected]
Answers
Suggested answer: B, C
asked 23/09/2024
Cristian Bello Henriquez
34 questions

Newly created subplaybooks do not have any inputs, or outputs. What is necessary to make them functional? (Choose two.)

Become a Premium Member for full access
Unlock Premium Member  Unlock Premium Member

During configuration of the inputs of a sub-playbook in the main playbook, there is an option under the Loop tab called "For Each Input". What is this option used to?

Become a Premium Member for full access
Unlock Premium Member  Unlock Premium Member

An engineer wants to customize the regex for the default IP indicator type. How can this change be implemented?

A.
Create a new indicator type and disable the built-in IP indicator
A.
Create a new indicator type and disable the built-in IP indicator
Answers
B.
Edit the regex of the default IP Indicator
B.
Edit the regex of the default IP Indicator
Answers
C.
Add a new server configuration key that will overwrite the default regex of the IP indicator
C.
Add a new server configuration key that will overwrite the default regex of the IP indicator
Answers
D.
Delete the default IP indicator
D.
Delete the default IP indicator
Answers
Suggested answer: A

Explanation:

Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoaradmin/manage-indicators/ understand-indicators/indicator-types/indicator-type-profile.html

asked 23/09/2024
Luis Marino
34 questions

After enriching a username using Active Directory, an engineer would like to send an email to the user’s manager. However, this functionality is not part of the command output. The engineer checks with raw- response=true and notices that the manager’s email is returned, but not saved in the context.

How can the engineer save the data so it will be accessible?

A.
Mark ignore output = true
A.
Mark ignore output = true
Answers
B.
Use extend-context
B.
Use extend-context
Answers
C.
Use raw-response = save
C.
Use raw-response = save
Answers
D.
Mark ignore input = true
D.
Mark ignore input = true
Answers
Suggested answer: B

Explanation:

Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoaradmin/playbooks/extend- context/extend-context-using-the-command-line.html

asked 23/09/2024
PKE Holding AG Leitgeb
33 questions

What are two of the actions available on the Version History tab of a content pack in the marketplace? (Choose two.)

Become a Premium Member for full access
Unlock Premium Member  Unlock Premium Member