100% Pass Your PCSAE Exam Dumps at First Attempt with Actual4test
Penetration testers simulate PCSAE exam PDF
NEW QUESTION 10
Which three actions can an engineer take on the troubleshooting page? (Choose three.)
- A. Export and import custom content
- B. Put the XSOAR server in maintenance mode
- C. View a list of server administrators
- D. View and modify server configuration settings
- E. Download the debug log bundle
Answer: B,D,E
NEW QUESTION 11
A large number of incidents were deleted by mistake.
Which two architecture components can be used to recover the lost data? (Choose two.)
- A. Distributed database
- B. Local backup
- C. Live backup
- D. Engine
Answer: C,D
NEW QUESTION 12
When mapping incoming data to incident fields, which statement is correct?
- A. Data that is not mapped is placed under labels
- B. Only text fields are classified
- C. Every incoming field must be mapped
- D. Classification cannot be used if mapping is enabled
Answer: C
NEW QUESTION 13
What is the correct definition regarding integration parameters and command arguments?
- A. Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command.
- B. Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command.
- C. Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command.
- D. Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command.
Answer: A
NEW QUESTION 14
What is a primary use case of data collection tasks?
- A. To generate new widgets for a dashboard
- B. To automate tasks such as parsing a file or enriching indicators
- C. To determine different paths in a playbook
- D. To allow multi-question surveys without authentication restrictions
Answer: D
NEW QUESTION 15
Match the action with the most appropriate playbook task type.
Answer:
Explanation:
Explanation
https://www.jaacostan.com/2021/02/palo-alto-cortex-xsoar-playbook-icons.html
NEW QUESTION 16
How is data transferred between playbook tasks?
- A. Input from the indicator page
- B. Directly from a previous task
- C. Over war room results
- D. Read/Write from context data
Answer: D
NEW QUESTION 17
Which two causes may be occurring if an integration test is working, but the integration is not fetching incidents? (Choose two.)
- A. It can take up to 1-hour before incidents are initially fetched
- B. The first fetch should be manually triggered to start the fetching process
- C. The 'Fetches Incidents' option may not have been enabled
- D. There are no new events from the external service
Answer: B,C
NEW QUESTION 18
Multiple company assets were reported by vulnerability scanners as being vulnerable to CVE-2017-11882.
This vulnerability affects applications installed on workstations. The SOC team needs to take action and apply the new vulnerability patch that was just released. The team must first create a cause for each of the identified assets in ServiceNow IT Service Management (ITSM), in order to notify the IT department. Next, the team creates a task in the main playbook, which extracts the list of assets from the scanner report.
After the list of assets are created, what are the two solutions that the SOC team could take so that a case could be created and a patch installed? (Choose two.)
- A. Set a key for storing the iteration number and create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Exit condition: iterator contains the count of the number of items in the list) and perform the following tasks:
-Active Directory User Enrichment based on the computerName
-Create the ServiceNow Record by adding the enrichment information
-Mark the ticket severity as Urgent - B. Create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Condition: AreValuesEqual - Exit on yes - left:1, right 1) and perform the following tasks:
-Active Directory User Enrichment based on the computerName
-Create the ServiceNow Record by adding the enrichment information
-Mark the ticket severity as Urgent - C. Create a sub-playbook with a single input containing the computer names that will loop 'For Each Input' and perform the following tasks:
-Active Directory User Enrichment based on the computerName
-Create the ServiceNow Record by adding the enrichment information
-Mark the ticket severity as Urgent - D. Set a key for storing the iteration number and create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Exit condition: iterator equal to count of the number of item in the list) and perform the following tasks:
-Increase the iterator value by one each time
-Active Directory User Enrichment based on the computerName
-Create the ServiceNow Record by adding the enrichment information
-Mark the ticket severity as Urgent
Answer: C,D
NEW QUESTION 19
In which two scenarios would it be appropriate to implement a loop for a sub-playbook? (Choose two.)
- A. In repetitive process flows to iterate for each playbook input
- B. In repetitive process flows with no more than 10 loops
- C. In repetitive processes that requires sub-playbook re-execution
- D. When continuously ingesting incidents from third-party systems
Answer: A,D
NEW QUESTION 20
When uploading content, which two options could the upload include? (Choose two.)
- A. Fields
- B. Reports
- C. Indicators
- D. Incidents
Answer: C,D
NEW QUESTION 21
An XSOAR Engineer has developed a playbook and would like to contribute it to the XSOAR Marketplace to share with other users.
Which two options are available to the Engineer for contributing to the Marketplace? (Choose two.)
- A. Contribute through the XSOAR UI
- B. Send an email to [email protected]
- C. Open a ticket with the XSOAR support team
- D. Create a pull request directly on Github
Answer: A,D
NEW QUESTION 22
What are three different loop types in a playbook? (Choose three.)
- A. Data collection
- B. For-each
- C. Conditional
- D. Automation
- E. Built-in
Answer: A,B,C
NEW QUESTION 23
Which method accesses a field called 'User Mail' in a playbook?
- A. ${incident.UserMail}
- B. ${incident.User Mail}
- C. ${usermail}
- D. ${incident.usermail}
Answer: D
NEW QUESTION 24
Which two solutions are available to scale an overloaded XSOAR environment? (Choose two.)
- A. Add a distributed database server
- B. Add an indexing server
- C. Add an engine
- D. Add a live backup server (disaster recovery)
Answer: A,D
NEW QUESTION 25
In which two ways can data be transferred between playbooks and sub-playbooks? (Choose two.)
- A. From context data, if context is shared globally
- B. Automatically extracted by sub-playbooks
- C. Through integration context
- D. Inputs and outputs
Answer: A,D
NEW QUESTION 26
Which two options will troubleshoot an integration's fetch incidents command? (Choose two.)
- A. execute !<integration_name>-fetch
- B. In the instance settings, enable the fetch incidents parameter and wait for one minute
- C. Create a one task playbook with a fetch-incident command
- D. execute !<integration_instance_name>-fetch
Answer: B,D
NEW QUESTION 27
Which two capabilities do Automation script settings include? (Choose two.)
- A. Correlate to incident types
- B. Define 'parameters'
- C. Set password protection
- D. Define 'outputs'
Answer: A,C
NEW QUESTION 28
An engineer asked for a specific command in an integration but the capability does not exist. The engineer decided to edit the existing integration by copying the integration and adding the needed commands.
What is the main concern when adding these commands?
- A. The integrations are locked and cannot be edited with additional commands
- B. The commands must return a proper result to the war room for the analysts to understand
- C. The custom integration will not be maintained and updated by XSOAR content team
- D. The code may not be written to XSOAR standards
Answer: A
NEW QUESTION 29
......
All PCSAE Dumps and Training Courses: https://www.actual4test.com/PCSAE_examcollection.html
Help candidates to study and pass the Palo Alto Networks Certified Security Automation Engineer Exams hassle-free: https://drive.google.com/open?id=1mcU1OwgXUP7SOYu4-dv_VnI9kVOTQTP_