Home / Palo Alto Networks / PCSAE

Palo Alto Networks PCSAE Practice Test - Questions Answers, Page 5

Question list

List of questions

Question 41

(0)

What is the correct expression to use when filtering only PDF files?

Question 42

(0)

Whar are possible war room result (entry) types?

Question 43

(0)

An engineer asked for a specific command in an integration but the capability does not exist. The engineer decided to edit the existing integration by copying the integration and adding the needed c

Question 44

(0)

How is data transferred between playbook tasks?

Question 45

(0)

A large number of incidents were deleted by mistake. Which two architecture components can be used to recover the lost data? (Choose two.)

Question 46

(0)

Which two statements accurately describe layouts? (Choose two.)

Question 47

(0)

An engineer’s organization system is registered in the following manner: <SiteName-SystemIDUsername>. The engineer created a new indicator type for detecting systems using regex. The engineer

Question 48

(0)

Which two options are the most effective for moving content between two environments? (Choose two.)

Question 49

(0)

Which three options can be defined in the layout settings? (Choose three.)

Question 50

(0)

What can be used as integration parameters?

Question 41

What is the correct expression to use when filtering only PDF files?

Use File.Extension that does not equal (string comparison) PDF

Use File.Name contains PDF

Use File.Extension contains (general) PDF

Use File.Extension equals (string comparison) PDF

Show Answer Comment (0)

Question 42

Whar are possible war room result (entry) types?

Context, file, error, image

Note, indicator, error, image

Video, file, error, image

Note, file, error, image

Show Answer Comment (0)

An engineer asked for a specific command in an integration but the capability does not exist. The engineer decided to edit the existing integration by copying the integration and adding the needed commands.

What is the main concern when adding these commands?

The commands must return a proper result to the war room for the analysts to understand

The code may not be written to XSOAR standards

The integrations are locked and cannot be edited with additional commands

The custom integration will not be maintained and updated by XSOAR content team

Show Answer Comment (0)

Question 44

How is data transferred between playbook tasks?

Read/Write from context data

Over war room results

Input from the indicator page

Directly from a previous task

Show Answer Comment (0)

Question 45

A large number of incidents were deleted by mistake.

Which two architecture components can be used to recover the lost data? (Choose two.)

Live backup

Engine

Distributed database

Local backup

Show Answer Comment (0)

Question 46

Which two statements accurately describe layouts? (Choose two.)

Layouts override classification and mapping

New tabs can be added to the incident layout

Layouts can display incident information and custom fields

Layouts add or remove custom fields from an incident type

Show Answer Comment (0)

Question 47

An engineer’s organization system is registered in the following manner: <SiteName-SystemIDUsername>.

The engineer created a new indicator type for detecting systems using regex. The engineer would now like the username to be created as a separate ‘User’ indicator automatically once a system is found.

What is the most efficient way for the engineer to achieve this?

Create a custom indicator field named ‘username’ and link it to the internal system indicator

Change the reputation command for the internal system indicator type

Create a new indicator type of the internal username and set a formatting script to extract only the username

Create a new indicator type of the internal username and have the regex included on any string that has dash at the beginning

Show Answer Comment (0)