Palo Alto Networks PCSAE Online Practice Questions and Exam Preparation

Palo Alto Networks PCSAE Online Questions & Answers

• Question 21:

  An Engineer wants to filter a csvList value according to a dynamic value saved under the test context key.

  Which three values would save the test context key? (Choose three.)

  A. Get csvList.value where csvList.value equals test [from previous tasks]
  B. Get csvList.value where csvList.value equals ${test} [from previous tasks]
  C. Get csvList.value where csvList.value equals test {}[from previous tasks]
  D. Get csvList.value where csvList.value equals test [as value]
  E. Get csvList.value where csvList.value equals ${test} [as value]
  A. Get csvList.value where csvList.value equals test [from previous tasks]
  B. Get csvList.value where csvList.value equals ${test} [from previous tasks]
  E. Get csvList.value where csvList.value equals ${test} [as value]

• Question 22:

  What are two of the actions available on the Version History tab of a content pack in the marketplace? (Choose two.)

  A. Download content for offline installation
  B. Uninstall content pack
  C. Update to x version
  D. Revert to x version
  C. Update to x version
  D. Revert to x version

• Question 23:

  DRAG DROP

  Match the action with the most appropriate playbook task type.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 24:

  In which two options can an automation script be executed? (Choose two.)

  A. Engine
  B. Integration
  C. War room
  D. Playbook
  C. War room
  D. Playbook

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar- admin/playbooks/ automations.html

• Question 25:

  When uploading content, which two options could the upload include? (Choose two.)

  A. Indicators
  B. Incidents
  C. Reports
  D. Fields
  A. Indicators
  B. Incidents

• Question 26:

  DRAG DROP

  Match the appropriate action to the layout type.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 27:

  What can be added to offload integration instance processing from the main server?

  A. Database node
  B. Application server
  C. Engine
  D. Development server
  A. Database node

• Question 28:

  Which built-in automation/command cab be used to change an incident's type?

  A. setIncident
  B. Set
  C. GetFieldsByIncidentType
  D. modifyIncidentFields
  A. setIncident

  ---

  Explanation/Reference:

  Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar- admin/incidents/incidents- management/incident-fields/field-trigger-scripts.html

• Question 29:

  The XSOAR administrator is writing an automation and would like to return an error entry back into XSOAR if a particular command errors out. How can this be achieved?

  A. Using the demisto_error() function
  B. Using a print statement
  C. Using the demisto.debug() function
  D. Using the return_error() function
  C. Using the demisto.debug() function

• Question 30:

  Which of the following is a feature of XSOAR automations?

  A. can run on multiple docker containers
  B. can be set to run on a scheduled basis in the automation settings
  C. can be password protected
  D. can be written in C++
  B. can be set to run on a scheduled basis in the automation settings

  ---

  Explanation/Reference:

  Reference: https://www.paloaltonetworks.com/resources/datasheets/cortex-xsoar-overview