Palo Alto Networks PCSAE Exam Questions Instant Access

Question 1

An incident field is created having the display name as Source_IP. How can the field be accessed?

A${incident.sourceip}

B${incident.Source_IP}

C${incident.srcip}

D${incident.Source IP}

Answer : C

Question 2

What is the default task type when creating an empty task?

AStandard (Manual)

BConditional

CSection header

DStandard (Automated)

Answer : B

Question 3

Which three authentication methods are supported when logging into XSOAR? (Choose three.)

AOTP token

BUser name and password

CSAML

DActive Directory authentication

ERADIUS

Answer : C, D, E

Question 4

An engineer deployed two different instances of Active Directory for each organization site. As part of account enrichment use case, the engineer would like to delete a user from one specific site.

Which command will accomplish this?

Arun 'ad-delete-user' command with 'user-dn' arg and using-brand=''Active Directory Query v2''

Brun 'ad-delete-user' command with 'user-dn' arg and raw-response=true

Crun 'ad-delete-user' command with 'user-dn' arg and ignore-outputs=true

Drun 'ad-delete-user' command with 'user-dn' arg and using=''Active Directory
Query v2_instance_1''

Answer : D

Question 5

Which three support types are included in the Marketplace Content Packs? (Choose three.)

ACustomer supported

BContex XSOAR supported

CCommunity supported

DPartner supported

EPrisma Cloud supported

Answer : B, C, D

Question 6

Which option is available in XSOAR to create the body of a Threat Intel Report?

AMarkdown

BGrid Fields

CDOC format

DJavascript

Answer : A

Question 7

What assigns newly ingested event attributes to incident fields?

APlaybooks

BClassification

CMapping

DLayouts

Answer : C

Palo Alto Networks Certified Security Automation Engineer PCSAE Exam Questions