ExamGecko

Palo Alto Networks PCSAE Practice Test - Questions Answers, Page 2

Question list
Search
Search

Which two capabilities do Automation script settings include? (Choose two.)

A.
Define ‘parameters’
A.
Define ‘parameters’
Answers
B.
Correlate to incident types
B.
Correlate to incident types
Answers
C.
Define ‘outputs’
C.
Define ‘outputs’
Answers
D.
Set password protection
D.
Set password protection
Answers
Suggested answer: C, D

DRAG DROP

Match the appropriate action to the layout type.


Question 12
Correct answer: Question 12

What is a primary use case of data collection tasks?

A.
To allow multi-
A.
To allow multi-
Answers
Suggested answer: A
A.
To automate tasks such as parsing a file or enriching indicators
A.
To automate tasks such as parsing a file or enriching indicators
Answers
B.
To generate new widgets for a dashboard
B.
To generate new widgets for a dashboard
Answers
C.
To determine different paths in a playbook
C.
To determine different paths in a playbook
Answers
Suggested answer: A

Explanation:

Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoaradmin/playbooks/playbook- tasks/communication-tasks/create-a-data-collection-task.html

In which three locations can an engineer try to find information, when troubleshooting a failed integration instance error produced by the test button? (Choose three.)

A.
The audit log
A.
The audit log
Answers
B.
The log bundle
B.
The log bundle
Answers
C.
The source code for an integration
C.
The source code for an integration
Answers
D.
The error message returned directly below the button
D.
The error message returned directly below the button
Answers
E.
The playground war room
E.
The playground war room
Answers
Suggested answer: B, C, D

Which two statements describe how timers are configured to start and stop automatically in a playbook? (Choose two.)

A.
Use a field of Number to count the number of seconds elapsed between two tasks
A.
Use a field of Number to count the number of seconds elapsed between two tasks
Answers
B.
After the playbook has run, calculate the total time taken and set the timer field with this value
B.
After the playbook has run, calculate the total time taken and set the timer field with this value
Answers
C.
To begin counting time taken, add a task in the playbook with automation startTimer. To end the counting, add a task with automation stopTimer
C.
To begin counting time taken, add a task in the playbook with automation startTimer. To end the counting, add a task with automation stopTimer
Answers
D.
From the Timers tab of the playbook task, choose the action for the timer and the timer field to perform the action on
D.
From the Timers tab of the playbook task, choose the action for the timer and the timer field to perform the action on
Answers
Suggested answer: C, D

How long is the trial period for paid content packs?

A.
30 days
A.
30 days
Answers
B.
14 days
B.
14 days
Answers
C.
7 days
C.
7 days
Answers
D.
60 days
D.
60 days
Answers
Suggested answer: A

Explanation:

Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoaradmin/marketplace/ marketplace-subscriptions.html

After enriching a username using Active Directory, an engineer would like to send an email to the user’s manager. However, this functionality is not part of the command output. The engineer checks with raw- response=true and notices that the manager’s email is returned, but not saved in the context.

How can the engineer save the data so it will be accessible?

A.
Mark ignore output = true
A.
Mark ignore output = true
Answers
B.
Use extend-context
B.
Use extend-context
Answers
C.
Use raw-response = save
C.
Use raw-response = save
Answers
D.
Mark ignore input = true
D.
Mark ignore input = true
Answers
Suggested answer: B

Explanation:

Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoaradmin/playbooks/extend- context/extend-context-using-the-command-line.html

Where can engineers add the post-processing scripts to incidents?

A.
The post-processing tag must be added to the automation
A.
The post-processing tag must be added to the automation
Answers
B.
Post-processing scripts must be added at the end of playbooks
B.
Post-processing scripts must be added at the end of playbooks
Answers
C.
Post-processing scripts must be added from the Incident Type editor
C.
Post-processing scripts must be added from the Incident Type editor
Answers
D.
Post-processing scripts must be added from the Post-Process Rules editor
D.
Post-processing scripts must be added from the Post-Process Rules editor
Answers
Suggested answer: C

An engineer would like to present a trend using widgets to compare to a previous week’s dat a. Which two methods will allow the engineer to meet the requirement? (Choose two.)

A.
Create widget of type Line, check ‘Display Trend’ and define as 7 days ago
A.
Create widget of type Line, check ‘Display Trend’ and define as 7 days ago
Answers
B.
Create a custom widget using a new incident query
B.
Create a custom widget using a new incident query
Answers
C.
Create widget of type Number, check ‘Display Trend’ and define as 7 days ago
C.
Create widget of type Number, check ‘Display Trend’ and define as 7 days ago
Answers
D.
Create a custom widget using a script
D.
Create a custom widget using a script
Answers
Suggested answer: A, D
Total 157 questions
Go to page: of 16