Palo Alto Networks PCSAE Online Practice Questions and Exam Preparation

Palo Alto Networks PCSAE Online Questions & Answers

• Question 1:

  Which three statements are true about the Marketplace? (Choose three.)

  A. Allows reverting back to a previous version of a content pack
  B. Enables users to participate in the community by sharing content
  C. Publishes content without additional review from the Cortex XSOAR team
  D. Allows uploading of content in additional languages
  E. Offers granularity in installation through content packs
  A. Allows reverting back to a previous version of a content pack
  B. Enables users to participate in the community by sharing content
  E. Offers granularity in installation through content packs

• Question 2:

  An administrator wants to send an email via the Mail Sender integration. Which of the following out of the box methods would be used for that?

  A. XSOAR D2 agent
  B. external integration command
  C. XSOAR shared agent
  D. common automation script
  B. external integration command

• Question 3:

  What are the out-of-the-box aggregate values that can be applied on widgets data?

  A. Min, Max, Count, Average, Custom Transformers
  B. Min, Max, Count, Average, Custom Group By
  C. Count, Average, Sum, Min, Max
  D. Count, Sum, Min, Max, Transformers
  C. Count, Average, Sum, Min, Max

• Question 4:

  How is data transferred between playbook tasks?

  A. Read/Write from context data
  B. Over war room results
  C. Input from the indicator page
  D. Directly from a previous task
  A. Read/Write from context data

• Question 5:

  Which two advanced attributes can be applied to incident fields when editing? (Choose two.)

  A. Set a field trigger script
  B. Associate to an incident type
  C. Change field type
  D. Change field name
  A. Set a field trigger script
  B. Associate to an incident type

  ---

  explanation:

  Explanation/Reference:

  Reference: https://docs.servicenow.com/bundle/quebec-it-service- management/page/product/incident- management/reference/incident-management- properties.html

• Question 6:

  Newly created subplaybooks do not have any inputs, or outputs. What is necessary to make them functional? (Choose two.)

  A. Define input key in the subplaybook task. Map context values to pull from parent playbook.
  B. The output of the previous task automatically becomes the input of the subplaybook.
  C. Map inputs and outputs to the parent playbook and the subplaybook will use the same values.
  D. Open the subplaybook and add inputs or outputs in the Playbook triggered task.
  A. Define input key in the subplaybook task. Map context values to pull from parent playbook.
  D. Open the subplaybook and add inputs or outputs in the Playbook triggered task.

• Question 7:

  An administrator has noticed that an incident fetch has failed, causing several internal workflows to be backed up. The administrator would like to receive notifications the next time the incident fetch fails.

  How can they achieve this?

  A. Create a custom playbook that sends an email each time the fetch fails.
  B. Create a new integration that monitors the incident fetch and sends an email if the fetch fails.
  C. Schedule a job that runs and monitors incidents in XSOAR that will send an email if there are no new incidents.
  D. Add a server config to notify when incident fetch fails.
  B. Create a new integration that monitors the incident fetch and sends an email if the fetch fails.

• Question 8:

  What are two common use cases for conditional tasks? (Choose two.)

  A. They are used for branching paths in a playbook
  B. They are used to interact with users through survey functionality
  C. They are used to determine which incident will be executed
  D. They are used for sending a specific QUESTION NO: to a person or team
  A. They are used for branching paths in a playbook
  D. They are used for sending a specific QUESTION NO: to a person or team

  ---

  explanation:

  Explanation/Reference:

  Reference: https://docs-new.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar- admin/cortex-xsoar- overview/use-cases.html#id7b31e50b-5aca-4d65-bdb5-ba61b4eac0b4

• Question 9:

  An organization has recently acquired another company as its subsidiary. The subsidiary has its infrastructure on AWS cloud as illustrated in the image below: The organization wants to use the mail server location on the subsidiary's cloud to send emails. Without acquiring additional licenses, which XSOAR component can fulfill the requirement?

  

  A. XSOAR D2 Agents, to send the required emails.
  B. An XSOAR engine that is downloaded from the XSOAR server and installed within the subsidiary.
  C. Another XSOAR server that uses the same license as their primary XSOAR server.
  D. A Linux server connected with an XSOAR server using SSH integration. Commands can be run remotely to access the mail server.
  D. A Linux server connected with an XSOAR server using SSH integration. Commands can be run remotely to access the mail server.

• Question 10:

  An automation returned an output called: csvReport.

  What filter would be used to check if the automation returned results?

  A. Contains/Includes
  B. Equals/Matches
  C. In/In list
  D. Is defined/Exist
  D. Is defined/Exist

  ---

  explanation:

  Explanation/Reference:

  This filter will be used to check if the automation returned results, as it checks to see if the output variable called csvReport is defined and exists. If it is, then the automation returned results.