Palo Alto Networks Certified Security Automation Engineer Exam Practice Test

Page: 1 / 14
Total 157 questions

Question 1

A SOC analyst needs to retrieve the list of all open phishing incidents in the last 30 days. What is the correct query to use?

Answer : C

Question 2

When browsing the Marketplace for new content packs, which details about each pack are you able to view?

Answer : B

Question 3

To avoid exceeding API quotas for third-party services, indicators are only updated after the indicator cache expiration period. What is the default cache expiration period for indicators in XSOAR (minutes/days)?

Answer : D

Question 4

In Cortex XSOAR multi tenant setup, when content from a development server is pushed to the remote repository, where in the production server can the updates be found?

Answer : B

Question 5

An administrator has noticed that an integration has failed to fetch incidents. Where would they go to download logs to troubleshoot the error?

Answer : B

Question 6

During the regular maintenance of XSOAR a customer noticed that there was an update available for the Active Directory content pack (current version 1.4.6) and updated the content pack to the latest version (version 1.4.11). However, after the update the customer noticed that the Active Directory Query integration is not working properly and asked you to resolve the issue.

Which of the following set of steps can help to resolve the issue?

Answer : C

Question 7

What is an example of a generic reputation command?

Answer : C

Page:    1 / 14   
Total 157 questions