Palo Alto Networks Palo Alto Certifications and Accreditations PCSAE Questions & Answers

• Question 1:

  Which two reasons would lead an engineer to create a custom widget? (Choose two.)

  A. To visualize server configuration keys

  B. To visualize XSOAR list data

  C. To visualize complex incident data calculations

  D. To visualize context data

  E. To visualize a custom query

  Correct Answer: DE

  Reference: https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/cortex-xsoar-admin.pdf/cortex-xsoar-admin.pdf

• Question 2:

  Which two solutions are available to scale an overloaded XSOAR environment? (Choose two.)

  A. Add a distributed database server

  B. Add an indexing server

  C. Add a live backup server (disaster recovery)

  D. Add an engine

  Correct Answer: AC

• Question 3:

  Management would like to get an incident report automatically following an incident's closure.

  How would this be accomplished?

  A. Define a task in a playbook to generate an incident report before the closure occurs

  B. Manually create an `Incident Report'

  C. Configure post-processing using a script

  D. Create an `Incident Report' from the Reports page

  Correct Answer: D

• Question 4:

  Which two input requirements are needed to train a machine learning model? (Choose two.)

  A. 3000 Incidents

  B. Incident Field

  C. Verdict Label

  D. Incident Type

  Correct Answer: BD

  Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/machine-learing-models/machine-learning-models-overview.html

• Question 5:

  Which three actions can an engineer take on the troubleshooting page? (Choose three.)

  

  A. Download the debug log bundle

  B. Put the XSOAR server in maintenance mode

  C. View and modify server configuration settings

  D. Export and import custom content

  E. View a list of server administrators

  Correct Answer: ABC

• Question 6:

  An XSOAR Engineer has developed a playbook and would like to contribute it to the XSOAR Marketplace to share with other users.

  Which two options are available to the Engineer for contributing to the Marketplace? (Choose two.)

  A. Open a ticket with the XSOAR support team

  B. Create a pull request directly on Github

  C. Contribute through the XSOAR UI

  D. Send an email to [email protected]

  Correct Answer: BC

• Question 7:

  In which two locations can filters and transformers be used in XSOAR? (Choose two.)

  A. Classification and Mapping

  B. Playbook Tasks

  C. Evidence Fields

  D. Incident Fields

  Correct Answer: BD

  Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/playbooks/filters-and-transformers.html

• Question 8:

  What is the correct definition regarding integration parameters and command arguments?

  A. Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command.

  B. Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command.

  C. Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command.

  D. Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command.

  Correct Answer: A

  Reference: https://xsoar.pan.dev/docs/tutorials/tut-integration-ui

• Question 9:

  By default, automation written in which language will be executed in a Docker container?

  A. Python

  B. Go

  C. JavaScript

  D. Perl

  Correct Answer: B

• Question 10:

  An automation returned an output called: csvReport.

  What filter would be used to check if the automation returned results?

  A. Contains/Includes

  B. Equals/Matches

  C. In/In list

  D. Is defined/Exist

  Correct Answer: B