Unique Top-selling PCSAE Exams - New 2021 Palo Alto Networks Pratice Exam
Palo Alto Networks Certification Dumps PCSAE Exam for Full Questions - Exam Study Guide
NEW QUESTION 51
How is data transferred between playbook tasks?
- A. Input from the indicator page
- B. Directly from a previous task
- C. Over war room results
- D. Read/Write from context data
Answer: D
NEW QUESTION 52
Which three scripting languages can an engineer use to write XSOAR automations? (Choose three.)
- A. Perl
- B. Go
- C. Python
- D. Powershell
- E. JavaScript
Answer: C,D,E
NEW QUESTION 53
Which three authentication methods are supported when logging into XSOAR? (Choose three.)
- A. OTP token
- B. RADIUS
- C. User name and password
- D. SAML
- E. Active Directory authentication
Answer: B,D,E
NEW QUESTION 54
What is the default task type when creating an empty task?
- A. Section header
- B. Standard (Automated)
- C. Conditional
- D. Standard (Manual)
Answer: C
NEW QUESTION 55
Which component can be part of a load balancing group?
- A. Distributed database
- B. D2 agent
- C. Load balancing server
- D. Engine
Answer: D
NEW QUESTION 56
Arrange these steps in the order that they occur during an incident fetch.
Answer:
Explanation:
NEW QUESTION 57
An engineer would like to present a trend using widgets to compare to a previous week's data. Which two methods will allow the engineer to meet the requirement? (Choose two.)
- A. Create widget of type Line, check 'Display Trend' and define as 7 days ago
- B. Create a custom widget using a new incident query
- C. Create widget of type Number, check 'Display Trend' and define as 7 days ago
- D. Create a custom widget using a script
Answer: A,D
NEW QUESTION 58
An engineer is developing a playbook that will be run multiple times for testing purposes. What is the recommended first task to be used in the playbook?
- A. GenerateTest
- B. SetContext
- C. PrintContext
- D. DeleteContext
Answer: D
NEW QUESTION 59
Which two options are the most effective for moving content between two environments? (Choose two.)
- A. UI based content import/export button
- B. Remote repository based content sharing
- C. Download the content items separately and upload them to the other environment
- D. Copy the content backup from one environment file system (/var/lib/demisto/backup/content- backup-*) and move it to the other environment
Answer: B,D
NEW QUESTION 60
A SOC manager built a dashboard and would like to share the dashboard with other team members. How would the SOC manager create a dashboard that meets this requirement?
- A. Dashboard is shared to all XSOAR users
- B. Manually share the dashboard through user emails
- C. Dashboard is shared to all XSOAR users in a selected role
- D. Propagate the dashboard based on SAML authentication
Answer: C
NEW QUESTION 61
Match the operations with the appropriate context.
Answer:
Explanation:
NEW QUESTION 62
An engineer would like to add a custom field to the New Job form for a job triggered from a threat intel feed.
How would the engineer implement this?
- A. The new job form changes based on the threat intel feed integration configuration
- B. The new job form for a threat intel feed job cannot be edited
- C. The new job form can be edited from the threat intel feeds integration settings
- D. The new job form can be edited from the Indicator Feed incident type editor
Answer: D
NEW QUESTION 63
After enriching a username using Active Directory, an engineer would like to send an email to the user's manager. However, this functionality is not part of the command output. The engineer checks with raw- response=true and notices that the manager's email is returned, but not saved in the context.
How can the engineer save the data so it will be accessible?
- A. Use raw-response = save
- B. Mark ignore output = true
- C. Use extend-context
- D. Mark ignore input = true
Answer: C
NEW QUESTION 64
Which two input requirements are needed to train a machine learning model? (Choose two.)
- A. Incident Field
- B. Verdict Label
- C. 3000 Incidents
- D. Incident Type
Answer: A,D
NEW QUESTION 65
Which two capabilities do Automation script settings include? (Choose two.)
- A. Correlate to incident types
- B. Define 'parameters'
- C. Set password protection
- D. Define 'outputs'
Answer: A,C
NEW QUESTION 66
How would context data be filtered to receive only malicious indicator values with DBotScore?
- A. Get DBotScore.value where DBotScore.Score (Larger or equals) 4
- B. Get DBotScore where DBotScore.Score (Larger than) 1
- C. Get DBotScore.value where DBotScore.Score (equals (int)) 3
- D. Get DBotScore where DBotScore.Score (Larger or equals) 2
Answer: C
NEW QUESTION 67
An XSOAR Engineer has developed a playbook and would like to contribute it to the XSOAR Marketplace to share with other users.
Which two options are available to the Engineer for contributing to the Marketplace? (Choose two.)
- A. Contribute through the XSOAR UI
- B. Send an email to [email protected]
- C. Open a ticket with the XSOAR support team
- D. Create a pull request directly on Github
Answer: A,D
NEW QUESTION 68
An engineer wants to customize the regex for the default IP indicator type. How can this change be implemented?
- A. Create a new indicator type and disable the built-in IP indicator
- B. Add a new server configuration key that will overwrite the default regex of the IP indicator
- C. Delete the default IP indicator
- D. Edit the regex of the default IP Indicator
Answer: A
NEW QUESTION 69
Which investigation element is best suited for collaboration among users?
- A. War Room
- B. Related Incidents
- C. Work Plan
- D. Context Data
Answer: D
NEW QUESTION 70
......
Best way to practice test for Palo Alto Networks PCSAE: https://www.prep4away.com/Palo-Alto-Networks-certification/braindumps.PCSAE.ete.file.html