Palo Alto Networks PCSAE Online Practice Questions and Exam Preparation

Palo Alto Networks PCSAE Online Questions & Answers

• Question 151:

  Which two functions in XSOAR are incident types used for? (Choose two.)

  A. To run dedicated playbooks for different event types
  B. To classify events ingested from various sources into the relevant types
  C. To classify indicators extracted in XSOAR incidents to their respective types
  D. To facilitate role based access to XSOAR incidents
  B. To classify events ingested from various sources into the relevant types
  C. To classify indicators extracted in XSOAR incidents to their respective types

• Question 152:

  Given an incident with three files, how could the name of the second file be referenced?

  A. ${Files.[2].Name}
  B. ${Files.Name.[2]}
  C. ${File.[1].Name}
  D. ${File.Name.[1]}
  D. ${File.Name.[1]}

• Question 153:

  An engineer deployed two different instances of Active Directory for each organization site. As part of account enrichment use case, the engineer would like to delete a user from one specific site.

  Which command will accomplish this?

  A. run `ad-delete-user' command with `user-dn' arg and using-brand="Active Directory Query v2"
  B. run `ad-delete-user' command with `user-dn' arg and raw-response=true
  C. run `ad-delete-user' command with `user-dn' arg and ignore-outputs=true
  D. run `ad-delete-user' command with `user-dn' arg and using="Active Directory Query v2_instance_1"
  D. run `ad-delete-user' command with `user-dn' arg and using="Active Directory Query v2_instance_1"

• Question 154:

  How can Cortex XSOAR administrators prevent junior analysts from viewing a senior analyst dashboard?

  A. Share the dashboard in Read and Edit mode for senior analysts.
  B. Share the dashboard in Read and Edit mode for senior analysts and Read Only for juniors analysts.
  C. Share the dashboard in Read and Write mode for senior analysts.
  D. Share the dashboard in Read Only mode for junior analysts and senior analysts.
  B. Share the dashboard in Read and Edit mode for senior analysts and Read Only for juniors analysts.

  ---

  Explanation/Reference:

  Reference: https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.5/Cortex-XSOAR- Administrator-Guide/Create-the-Read-Only-Dashboard

• Question 155:

  An engineer would like to present a trend using widgets to compare to a previous week's data. Which two methods will allow the engineer to meet the requirement? (Choose two.)

  A. Create widget of type Line, check `Display Trend' and define as 7 days ago
  B. Create a custom widget using a new incident query
  C. Create widget of type Number, check `Display Trend' and define as 7 days ago
  D. Create a custom widget using a script
  A. Create widget of type Line, check `Display Trend' and define as 7 days ago
  D. Create a custom widget using a script

• Question 156:

  Which task type would be used to verify/check that an integration was enabled?

  A. Standard task
  B. Conditional task
  C. Section Header task
  D. Data Collection task
  D. Data Collection task