Palo Alto Networks PCSAE Practice Test - Questions Answers
List of questions
Question 1

Which two advanced attributes can be applied to incident fields when editing? (Choose two.)
Explanation:
Reference: https://docs.servicenow.com/bundle/quebec-it-servicemanagement/page/product/incident- management/reference/incident-managementproperties.html
Question 2

Given an incident with three files, how could the name of the second file be referenced?
Question 3

Which component can be part of a load balancing group?
Explanation:
Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoaradmin/engines/understand- demisto-engines.html
Question 4

Which method accesses a field called ‘User Mail’ in a playbook?
Question 5

A SOC manager built a dashboard and would like to share the dashboard with other team members.
How would the SOC manager create a dashboard that meets this requirement?
Explanation:
Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoaradmin/dashboards/share- a-dashboard.html
Question 6

Which two methods will allow data to be saved in incident fields within a playbook? (Choose two.)
Question 7

DRAG DROP
Match the action with the most appropriate playbook task type.
Explanation:
https://www.jaacostan.com/2021/02/palo-alto-cortex-xsoar-playbook-icons.html
Question 8

Which built-in automation/command cab be used to change an incident’s type?
Explanation:
Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoaradmin/incidents/incidents- management/incident-fields/field-trigger-scripts.html
Question 9

An engineer notices that playbooks only start once the user clicks the ‘investigate’ button and he/she would like the playbook to start automatically.
How can this be implemented?
Question 10

Which two causes may be occurring if an integration test is working, but the integration is not fetching incidents? (Choose two.)
Question