Practice PCSAE Exam Online

Question 1

An incident field is created having the display name as Source_IP. How can the field be accessed?

A : ${incident.sourceip}

B : ${incident.Source_IP}

C : ${incident.srcip}

D : ${incident.srcip}

Answer: C

Question 2

What is a primary use case of data collection tasks?

A :

To allow multi-

Question: surveys without authentication restrictions

B : To automate tasks such as parsing a file or enriching indicators

C : To generate new widgets for a dashboard

D : To determine different paths in a playbook

Answer: A

Question 3

An administrator has noticed that an incident fetch has failed, causing several internal workflows to be backed up. The administrator would like to receive notifications the next time the incident fetch fails. How can they achieve this?

A : Create a custom playbook that sends an email each time the fetch fails.

B : Create a new integration that monitors the incident fetch and sends an email if the fetch fails.

C : Schedule a job that runs and monitors incidents in XSOAR that will send an email if there are no new incidents.

D : Add a server config to notify when incident fetch fails.

Answer: B

Question 4

What are two of the actions available on the Version History tab of a content pack in the marketplace? (Choose two.)

A : Download content for offline installation

B : Uninstall content pack

C : Update to x version

D : Revert to x version

Answer: C,D

Question 5

Which two components have their own context data? (Choose two.)

A : Sub-playbook

B : Task

C : Field

D : Incident

Answer: A,D

Name:	Palo Alto Networks Certified Security Automation Engineer
Exam Code:	PCSAE
Certification:	Paloalto Networks
Vendor:	Palo Alto Networks
Total Questions:	158
Last Updated:	Apr 25, 2024

Palo Alto Networks PCSAE