Home

Home / Palo Alto Networks / PCSAE

Question list

List of questions

Question 1

(0)

Which two advanced attributes can be applied to incident fields when editing? (Choose two.)

Question 2

(0)

Given an incident with three files, how could the name of the second file be referenced?

Question 3

(0)

Which component can be part of a load balancing group?

Question 4

(0)

Which method accesses a field called ‘User Mail’ in a playbook?

Question 5

(0)

A SOC manager built a dashboard and would like to share the dashboard with other team members. How would the SOC manager create a dashboard that meets this requirement?

Question 6

(0)

Which two methods will allow data to be saved in incident fields within a playbook? (Choose two.)

Question 7

(0)

DRAG DROP Match the action with the most appropriate playbook task type.

Question 8

(0)

Which built-in automation/command cab be used to change an incident’s type?

Question 9

(0)

An engineer notices that playbooks only start once the user clicks the ‘investigate’ button and he/she would like the playbook to start automatically. How can this be implemented?

Question 10

(0)

Which two causes may be occurring if an integration test is working, but the integration is not fetching incidents? (Choose two.)

Open VPLUS File

Convert VPLUS to PDF

Related questions

On the System Diagnostics page, what is the default minimum size for a Work Plan to be considered big?

An XSOAR Engineer has developed a playbook and would like to contribute it to the XSOAR Marketplace to share with other users. Which two options are available to the Engineer for contributing to the Marketplace? (Choose two.)

Which three scripting languages can an engineer use to write XSOAR automations? (Choose three.)

Which of the following is a basic setting that can be configured in an automation?

What are two of the actions available on the Version History tab of a content pack in the marketplace? (Choose two.)

A SOC analyst needs to retrieve the list of all open phishing incidents in the last 30 days. What is the correct query to use?

To avoid exceeding API quotas for third-party services, indicators are only updated after the indicator cache expiration period. What is the default cache expiration period for indicators in XSOAR (minutes/days)?

Which development languages are supported when creating XSOAR automation scripts?

What is the default landing page for a new user in XSOAR?

Which configuration is a valid distributed database (DB) implementation?

Question 92 - PCSAE discussion

Report

You need to retrieve a list of all malicious hashes over the last 30 days. What is the correct query to use?

A.

type:File reputation:Malicious sourcetimestamp:"30 days ago"

B.

type:File verdict:Malicious sourcetimestamp:<="30 days ago"

C.

type:File reputation:Malicious sourcetimestamp:="30 days ago"

D.

type:File verdict:Malicious sourcetimestamp:>="30 days ago"

Show Answer

asked 23/09/2024

Kamal maru

41 questions

User

Your answer: A B C D

0 comments

Sorted by

Leave a comment first