Updated PCSAE Dumps (V10.02): Securing the Palo Alto Networks Certified Security Automation Engineer PCSAE Certification

1. Reliability scores in XSOAR range from A through F.

What do A and F stand for?

2. Which two incident search queries are valid? (Choose two.)

3. Where can engineers add the post-processing scripts to incidents?

4. How would context data be filtered to receive only malicious indicator values with DBotScore?

5. How is data transferred between playbook tasks?

6. What are inputs and outputs in reference to a Playbook Development Lifecycle? (Choose three.)

7. Which two statements accurately describe layouts? (Choose two.)

8. Which configuration is a valid distributed database (DB) implementation?

9. Threat Intel search queries can be shared with which of the following? (Select 1)

10. Which of these would be the most operationally efficient repository for moving XSOAR custom content from a development server to a production environment?

11. Whar are possible war room result (entry) types?

12. An engineer asked for a specific command in an integration but the capability does not exist. The engineer decided to edit the existing integration by copying the integration and adding the needed commands.

What is the main concern when adding these commands?

13. You need to retrieve a list of all malicious hashes over the last 30 days.

What is the correct query to use?

14. When creating an automation in XSOAR, what is the best way to create a log message?

15. The XSOAR administrator is writing an automation and would like to return an error entry back into XSOAR if a particular command errors out.

How can this be achieved?

16. Which two functions in XSOAR are incident types used for? (Choose two.)

17. Which of the following is a prerequisite to editing out-of-the-box (OOTB) content?

18. Which field type provides an interactive and editable display of table-based data?

19. An incident field is created having the display name as Source_IP.

How can the field be accessed?

20. Which three options can be defined in the layout settings? (Choose three.)

21. Can an automation script execute an integration command and an integration command execute an automation script?

22. DRAG DROP

Arrange these steps in the order that they occur during an incident fetch.

23. What are two common use cases for conditional tasks? (Choose two.)

24. DRAG DROP

Match the operations with the appropriate context.

25. A playbook task generates a report as HTML in the context data.

An engineer creates a custom indicator field of type "HTML" and adds the field to a section in a custom indicator layout.

How can the engineer populate the HTML field in the indicator layout?

26. Which three actions can an engineer take on the troubleshooting page? (Choose three.)

27. Which method accesses a field called ‘User Mail’ in a playbook?

28. Which two causes may be occurring if an integration test is working, but the integration is not fetching incidents? (Choose two.)

29. An administrator wants to send an email via the Mail Sender integration.

Which of the following out of the box methods would be used for that?

30. How long is the trial period for paid content packs?

31. In which two scenarios would it be appropriate to implement a loop for a sub-playbook? (Choose two.)

32. What is the default landing page for a new user in XSOAR?

33. Which of the following are valid methods to contribute custom content? (Choose three.)

34. An automation returned an output called: csvReport.

What filter would be used to check if the automation returned results?

35. You can customize most aspects of the incident layout, including which three of the following? (Choose three.)

36. An engineer would like to change an incident’s SLA according to the severity field changes.

How can the engineer achieve this task?

37. Where do you navigate to monitor and improve the system performance and resilience for hosts in a multitenant environment?

38. During configuration of the inputs of a sub-playbook in the main playbook, there is an option under the Loop tab called "For Each Input".

What is this option used to?

39. Where are incident layouts customized?

40. Which tag must be applied to an Automation Script in order for it to be available when configuring an Indicator Type?

41. Which of the following is a feature of XSOAR automations?

42. Which two methods are used to add new content to the XSOAR Content Repository? (Choose two.)

43. Which two capabilities do Automation script settings include? (Choose two.)

44. When mapping incoming data to incident fields, which statement is correct?

45. When browsing the Marketplace for new content packs, which details about each pack are you able to view?

46. DRAG DROP

Match the action with the most appropriate playbook task type.

47. What is the default configuration for indicator auto-extraction when incidents are created?

48. Inside the Incidents table view, which actions can be performed on the selected incidents? (Choose two.)

49. A SOC analyst needs to retrieve the list of all open phishing incidents in the last 30 days.

What is the correct query to use?

50. In which three locations can an engineer try to find information, when troubleshooting a failed integration instance error produced by the test button? (Choose three.)

51. In Cortex XSOAR multi tenant setup, when content from a development server is pushed to the remote repository, where in the production server can the updates be found?

52. Newly created subplaybooks do not have any inputs, or outputs.

What is necessary to make them functional? (Choose two.)

53. Which two components have their own context data? (Choose two.)

54. Which built-in automation/command cab be used to change an incident’s type?

55. Email Subject C “You have won a million dollars”

What is the correct query syntax for the above incident search filter?