Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Home
Paloalto Networks
Palo Alto Certifications and Accreditations
PCSAE
Palo Alto Networks Certified Security Automation Engineer Questions and Answers

Pass the Paloalto Networks Palo Alto Certifications and Accreditations PCSAE Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam PCSAE Premium Access

View all detail and faqs for the PCSAE exam

Go to Exam

511 Students Passed

92% Average Score

91% Same Questions

Viewing page 1 out of 5 pages

Viewing questions 1-10 out of questions

Questions # 1:

In which two ways can data be transferred between playbooks and sub-playbooks? (Choose two.)

Options:

Inputs and outputs

Through integration context

Automatically extracted by sub-playbooks

From context data, if context is shared globally

Answer

A, D

Questions # 2:

A SOC manager built a dashboard and would like to share the dashboard with other team members. How would the SOC manager create a dashboard that meets this requirement?

Options:

Manually share the dashboard through user emails

Dashboard is shared to all XSOAR users

Propagate the dashboard based on SAML authentication

Dashboard is shared to all XSOAR users in a selected role

Answer

Explanation

[Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-1/cortex-xsoar-admin/dashboards/share- a-dashboard.html, ]

Questions # 3:

An XSOAR Engineer has developed a playbook and would like to contribute it to the XSOAR Marketplace to share with other users.

Which two options are available to the Engineer for contributing to the Marketplace? (Choose two.)

Options:

Open a ticket with the XSOAR support team

Create a pull request directly on Github

Contribute through the XSOAR UI

Send an email to contributions@xsoar.com

Answer

B, C

Questions # 4:

How can Cortex XSOAR administrators prevent junior analysts from viewing a senior analyst dashboard?

Options:

Share the dashboard in Read and Edit mode for senior analysts.

Share the dashboard in Read & Edit mode for senior analysts and Read Only for juniors analysts.

Share the dashboard in Read and Write mode for senior analysts.

Share the dashboard in Read Only mode for junior analysts and senior analysts.

Answer

Explanation

[Reference: https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.5/Cortex-XSOAR-Administrator-Guide/Create-the-Read-Only-Dashboard, ]

Questions # 5:

Which two incident search queries are valid? (Choose two.)

Options:

created:>=”7 days”

owner===admin

role is Analyst

status:closed –category:job

Answer

A, D

Explanation

[Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar-admin/cortex-xsoar- overview/how-to-search-in-cortex-xsoar.html, ]

Questions # 6:

Which of these would be the most operationally efficient repository for moving XSOAR custom content from a development server to a production environment?

Options:

A content repository specified in the Marketplace

Remote git repository specified in the dev-prod configuration parameters

The development server's default repository

Cortex XSOAR public content repository

Answer

Questions # 7:

An engineer is developing a playbook that will be run multiple times for testing purposes. What is the recommended first task to be used in the playbook?

Options:

DeleteContext

GenerateTest

PrintContext

SetContext

Answer

Explanation

[Reference: https://xsoar.pan.dev/docs/integrations/test-playbooks, ]

Questions # 8:

What can be added to offload integration instance processing from the main server?

Options:

Database node

Application server

Engine

Development server

Answer

Questions # 9:

A Cortex XSOAR Administrator is tasked with building a button for an analyst in order for the analyst to be assigned to the incident as an owner. What is the process?

Options:

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with no argument

Edit the incident layout to add a new button that calls the AssignToMeButton automation with argument assignBy={me}

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument owner={me}

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument assignBy=current

Answer

Questions # 10:

For troubleshooting, after a log bundle is created, where do the logs appear on the XCSOAR server?

Options:

/var/lib/demisto

/tmp/log/demisto

/usr/local/demisto

/var/log/demisto

Answer

Viewing page 1 out of 5 pages

Viewing questions 1-10 out of questions

Modal title

Registered Required

In order to participate in the comments you need to be logged-in.
You can sign-up or login (it's free).

TOP CODES

Top selling exam codes in the certification world, popular, in demand and updated to help you pass on the first try.

2V0-11.25

ADM-201

Agentforce-Specialist

CMMC-CCP

Data-Cloud-Consultant

PCNSE

PDI

PSE-Strata-Pro-24

Secure-Software-Design

Sharing-and-Visibility-Architect

Workday-Pro-Integrations

ZDTA