Free Palo Alto Networks Certified Security Automation Engineer Exam PCSAE Exam Practice Test

When creating a new tab in the layout, which section cannot be added?

• Retrieve widget chart based on script
  
• Related incidents
  
• War room entries picked by entry query
  
• Incident team members
  

Which investigation element is best suited for collaboration among users?

• Work Plan
  
• Related Incidents
  
• War Room
  
• Context Data
  

Inside the Incidents table view, which actions can be performed on the selected incidents? (Choose two.)

• Run Command, Export, and Close and Delete for all selected incidents regardless of their status
  
• Assign, Edit, and Mark as Duplicate for all selected incidents regardless of their status
  
• Run Command for all selected incidents having Active status
  
• Export incidents as JSON and change incident status
  

Which field type should be used to hold more than 60,000 characters of unformatted text?

• Short Text
  
• HTML
  
• Long Text
  
• Markdown
  

Threat Intel search queries can be shared with which of the following? (Select 1)

• Users defined in the platform (email or username)
  
• Other organizations via the Marketplace
  
• Users outside XSOAR via email invite
  
• Roles defined in the platform
  

Which three authentication methods are supported when logging into XSOAR? (Choose three.)

• OTP token
  
• User name and password
  
• SAML
  
• Active Directory authentication
  
• RADIUS
  

What does Script helper contain?

• Available commands
  
• Permission settings
  
• Automation version history
  
• Automation timeout configuration
  

What is the default landing page for a new user in XSOAR?

• Dashboards
  
• Threat Intel
  
• Settings
  
• Marketplace
  

Which configuration is a valid distributed database (DB) implementation?

• 2 main DBs, 1 application server, 2 node servers
  
• 1 main DB, 1 application server, 3 node servers
  
• 2 application servers, 1 main DB, 1 node server
  
• 1 application server, 2 main DBs, 1 node server
  

An engineer would like to change an incident's SLA according to the severity field changes. How can the engineer achieve this task?

• Use a field trigger script
  
• Use a field display script
  
• Create a job that queries for incident severity changes
  
• Change the SLA manually every time the severity changes