PCSAE試験無料問題集（158題）「Palo Alto Networks Certified Security Automation Engineer 認定」

出題：1

Which two options may be added when a content pack is being installed? (Choose two.)

A. Other content packs

B. Indicator layouts

C. Lists

D. Roles

正解：C,D 解答を投票する

出題：2

What is the correct definition regarding integration parameters and command arguments?

A. Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command.

B. Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command.

C. Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command.

D. Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command.

正解：D 解答を投票する

出題：3

An incident field is created having the display name as Source_IP. How can the field be accessed?

A. ${incident.sourceip}

B. ${incident.srcip}

C. ${incident.Source IP}

D. ${incident.Source_IP}

正解：B 解答を投票する

出題：4

What is the most effective way to correlate multiple raw events coming from a SIEM and link them together?

A. Process all alerts by running the respective playbook and link related incidents during post-processing

B. Ingest all raw events, run a custom script to find the relationship between them and proceed to link them together

C. Manually go through the incidents created by the raw events and link related incidents

D. Configure a pre-process rule to link related events as they are ingested

正解：D 解答を投票する

出題：5

Which two options will troubleshoot an integration's fetch incidents command? (Choose two.)

A. In the instance settings, enable the fetch incidents parameter and wait for one minute

B. Create a one task playbook with a fetch-incident command

C. execute !<integration_name>-fetch

D. execute !<integration_instance_name>-fetch

正解：A,D 解答を投票する

出題：6

Match the action with the most appropriate playbook task type.

正解：

出題：7

In Cortex XSOAR multi tenant setup, when content from a development server is pushed to the remote repository, where in the production server can the updates be found?

A. Main Account

B. Marketplace

C. Tenants

D. Agent tools

正解：C 解答を投票する

出題：8

At what stage during the incident lifecycle is an incident type assigned?

A. Pre-processing

B. Incident creation

C. Classification

D. Playbook execution

正解：C 解答を投票する

出題：9

Newly created subplaybooks do not have any inputs, or outputs. What is necessary to make them functional? (Choose two.)

A. Map inputs and outputs to the parent playbook and the subplaybook will use the same values.

B. Open the subplaybook and add inputs or outputs in the Playbook triggered task.

C. Define input key in the subplaybook task. Map context values to pull from parent playbook.

D. The output of the previous task automatically becomes the input of the subplaybook.

正解：B,C 解答を投票する

出題：10

An engineer deployed two different instances of Active Directory for each organization site. As part of account enrichment use case, the engineer would like to delete a user from one specific site.
Which command will accomplish this?

A. run 'ad-delete-user' command with 'user-dn' arg and using="Active Directory

B. run 'ad-delete-user' command with 'user-dn' arg and ignore-outputs=true

C. run 'ad-delete-user' command with 'user-dn' arg and using-brand="Active Directory Query v2"

D. run 'ad-delete-user' command with 'user-dn' arg and raw-response=true

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

PCSAE試験無料問題集「Palo Alto Networks Certified Security Automation Engineer 認定」