Palo Alto Networks PCSAE Online Practice Questions and Exam Preparation

Palo Alto Networks PCSAE Online Questions & Answers

• Question 1:

  Which development languages are supported when creating XSOAR automation scripts?

  A. C++, Python, Powershell
  B. Ruby, C++, Python
  C. Javascript, Powershell, C++
  D. Python, Powershell, Javascript
  D. Python, Powershell, Javascript

• Question 2:

  Which two causes may be occurring if an integration test is working, but the integration is not fetching incidents? (Choose two.)

  A. The 'Fetches Incidents' option may not have been enabled
  B. There are no new events from the external service
  C. The first fetch should be manually triggered to start the fetching process
  D. It can take up to 1-hour before incidents are initially fetched
  A. The 'Fetches Incidents' option may not have been enabled
  B. There are no new events from the external service

• Question 3:

  Which two features does XSOAR offer to help recover from a server failure? (Choose two.)

  A. Live backup (disaster recovery)
  B. Distributed database
  C. Backup data to XSOAR engines
  D. Local backup
  A. Live backup (disaster recovery)
  C. Backup data to XSOAR engines

• Question 4:

  When creating a new tab in the layout, which section cannot be added?

  A. Retrieve widget chart based on script
  B. Related incidents
  C. War room entries picked by entry query
  D. Incident team members
  B. Related incidents

  ---

  Explanation/Reference:

  https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.6/Cortex- XSOAR-Administrator-Guide/Customize-Incident-Layouts

• Question 5:

  Can an automation script execute an integration command and an integration command execute an automation script?

  A. An automation script cannot execute an integration command and an integration command cannot execute an automation script
  B. An automation script can execute an integration command and an integration command cannot execute an automation script
  C. An automation script cannot execute an integration command and an integration command can execute an automation script
  D. An automation script can execute an integration command and an integration command can execute an automation script
  B. An automation script can execute an integration command and an integration command cannot execute an automation script

• Question 6:

  In Cortex XSOAR multi tenant setup, when content from a development server is pushed to the remote repository, where in the production server can the updates be found?

  A. Main Account
  B. Tenants
  C. Agent tools
  D. Marketplace
  B. Tenants

  ---

  Explanation/Reference:

  Reference: https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.6/Cortex-XSOAR- Multi-Tenant-Guide/Configure-a-Remote-Repository-on-the-Main-Account

• Question 7:

  An automation returned an output called: csvReport.

  What filter would be used to check if the automation returned results?

  A. Contains/Includes
  B. Equals/Matches
  C. In/In list
  D. Is defined/Exist
  D. Is defined/Exist

  ---

  Explanation/Reference:

  This filter will be used to check if the automation returned results, as it checks to see if the output variable called csvReport is defined and exists. If it is, then the automation returned results.

• Question 8:

  Which two components have their own context data? (Choose two.)

  A. Sub-playbook
  B. Task
  C. Field
  D. Incident
  A. Sub-playbook
  D. Incident

• Question 9:

  Which three actions can an engineer take on the troubleshooting page? (Choose three.)

  

  A. Download the debug log bundle
  B. Put the XSOAR server in maintenance mode
  C. View and modify server configuration settings
  D. Export and import custom content
  E. View a list of server administrators
  A. Download the debug log bundle
  B. Put the XSOAR server in maintenance mode
  C. View and modify server configuration settings

• Question 10:

  When browsing the Marketplace for new content packs, which details about each pack are you able to view?

  A. The integration's source code
  B. A summary of each version history
  C. A test instance for the content pack
  D. The source code of each playbook
  B. A summary of each version history