Palo Alto Networks Palo Alto Certifications and Accreditations PCSAE Questions & Answers

• Question 11:

  What is the difference between labels and fields?

  A. Fields can be used in playbooks and labels cannot

  B. Fields are indexed in the database and labels are not

  C. Labels can be used in queries and fields cannot

  D. Labels are indexed in the database and fields are not

  Correct Answer: C

• Question 12:

  What is the default task type when creating an empty task?

  A. Standard (Manual)

  B. Conditional

  C. Section header

  D. Standard (Automated)

  Correct Answer: B

  Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar-admin/playbooks/playbook-tasks/playbook-task-fields.html

• Question 13:

  Which two methods are used to add new content to the XSOAR Content Repository? (Choose two.)

  A. Create content and add it to the standard content by contributing through the Marketplace

  B. Use the XSOAR GitHub Contribution Guide to add the contribution to the standard content

  C. Create a support ticket with the custom content for review by the support team

  D. Any custom content will be automatically uploaded to the content repository

  Correct Answer: AD

• Question 14:

  In which two options can an automation script be executed? (Choose two.)

  A. Engine

  B. Integration

  C. War room

  D. Playbook

  Correct Answer: CD

  Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/playbooks/automations.html

• Question 15:

  An engineer would like to add a custom field to the New Job form for a job triggered from a threat intel feed. How would the engineer implement this?

  A. The new job form changes based on the threat intel feed integration configuration

  B. The new job form can be edited from the Indicator Feed incident type editor

  C. The new job form for a threat intel feed job cannot be edited

  D. The new job form can be edited from the threat intel feeds integration settings

  Correct Answer: B

  Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-threat-intel-management-guide/manage-indicators/understand-indicators/create-a-feed-based-job.html

• Question 16:

  Which configuration is a valid distributed database (DB) implementation?

  A. 2 main DBs, 1 application server, 2 node servers

  B. 1 main DB, 1 application server, 3 node servers

  C. 2 application servers, 1 main DB, 1 node server

  D. 1 application server, 2 main DBs, 1 node server

  Correct Answer: C

• Question 17:

  In which two scenarios would it be appropriate to implement a loop for a sub-playbook? (Choose two.)

  A. In repetitive process flows to iterate for each playbook input

  B. When continuously ingesting incidents from third-party systems

  C. In repetitive process flows with no more than 10 loops

  D. In repetitive processes that requires sub-playbook re-execution

  Correct Answer: AB

• Question 18:

  An engineer wants to customize the regex for the default IP indicator type. How can this change be implemented?

  A. Create a new indicator type and disable the built-in IP indicator

  B. Edit the regex of the default IP Indicator

  C. Add a new server configuration key that will overwrite the default regex of the IP indicator

  D. Delete the default IP indicator

  Correct Answer: A

  Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/manage-indicators/understand-indicators/indicator-types/indicator-type-profile.html

• Question 19:

  What are two common use cases for conditional tasks? (Choose two.)

  A. They are used for branching paths in a playbook

  B. They are used to interact with users through survey functionality

  C. They are used to determine which incident will be executed

  D. They are used for sending a specific question to a person or team

  Correct Answer: AC

  Reference: https://docs-new.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar-admin/cortex-xsoar-overview/use-cases.html#id7b31e50b-5aca-4d65-bdb5-ba61b4eac0b4

• Question 20:

  What are three different loop types in a playbook? (Choose three.)

  A. Automation

  B. Built-in

  C. Data collection

  D. Conditional

  E. For-each

  Correct Answer: CDE