Home / Palo Alto Networks / PCSAE

Palo Alto Networks PCSAE Practice Test - Questions Answers, Page 16

Question list

List of questions

Question 151

(0)

Newly created subplaybooks do not have any inputs, or outputs. What is necessary to make them functional? (Choose two.)

Question 152

(0)

A Cortex XSOAR Administrator is tasked with building a button for an analyst in order for the analyst to be assigned to the incident as an owner. What is the process?

Question 153

(0)

Which field type should be used to hold more than 60,000 characters of unformatted text?

Question 154

(0)

In order to automatically run a playbook on the indicators fetched by an integration, what would an XSOAR Administrator setup?

Question 155

(0)

Which two functions in XSOAR are incident types used for? (Choose two.)

Question 156

(0)

When creating an incident layout section, it is best to place long field values within which of the following?

Question 157

(0)

The default expiration method for non-feed indicators is either to never expire or to expire after a specific period of time. How frequently does XSOAR check tor newly expired indicators?

Question 151

Newly created subplaybooks do not have any inputs, or outputs. What is necessary to make them functional? (Choose two.)

Define input key in the subplaybook task. Map context values to pull from parent playbook.

The output of the previous task automatically becomes the input of the subplaybook.

Map inputs and outputs to the parent playbook and the subplaybook will use the same values.

Open the subplaybook and add inputs or outputs in the Playbook triggered task.

Show Answer Comment (0)

Question 152

A Cortex XSOAR Administrator is tasked with building a button for an analyst in order for the analyst to be assigned to the incident as an owner. What is the process?

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with no argument

Edit the incident layout to add a new button that calls the AssignToMeButton automation with argument assignBy={me}

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument owner={me}

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument assignBy=current

Show Answer Comment (0)

Question 153

Which field type should be used to hold more than 60,000 characters of unformatted text?

Short Text

HTML

Long Text

Markdown

Show Answer Comment (0)

Question 154

In order to automatically run a playbook on the indicators fetched by an integration, what would an XSOAR Administrator setup?

Cron job

Time triggered job

Feed triggered job

REST API job

Show Answer Comment (0)

Question 155

Which two functions in XSOAR are incident types used for? (Choose two.)

To run dedicated playbooks for different event types

To classify events ingested from various sources into the relevant types

To classify indicators extracted in XSOAR incidents to their respective types

To facilitate role based access to XSOAR incidents

Show Answer Comment (0)

Question 156

When creating an incident layout section, it is best to place long field values within which of the following?

Section headers

Rows

Canvas

Cards

Show Answer Comment (0)

Question 157

The default expiration method for non-feed indicators is either to never expire or to expire after a specific period of time. How frequently does XSOAR check tor newly expired indicators?

Every 24 hours

Every 5 minutes

Every 8 hours

Every 1 hour

Show Answer Comment (0)

Total 157 questions