[2023年11月11日] 無料Palo Alto Certifications and Accreditations PCSAE公式認定ガイドPDFダウンロード
Palo Alto Networks PCSAE公式認定ガイドPDF
PCSAE認定試験は、グローバルで認められているベンダーの中立的な認定試験です。この認証は、セキュリティと自動化の分野でキャリアを進めたいITプロフェッショナルに最適です。また、この認証は、組織がセキュリティ運用を自動化するために必要なスキルを持つITプロフェッショナルを見つけて採用するための助けとなります。
質問 # 93
An engineer deployed two different instances of Active Directory for each organization site. As part of account enrichment use case, the engineer would like to delete a user from one specific site.
Which command will accomplish this?
- A. run 'ad-delete-user' command with 'user-dn' arg and ignore-outputs=true
- B. run 'ad-delete-user' command with 'user-dn' arg and using-brand="Active Directory Query v2"
- C. run 'ad-delete-user' command with 'user-dn' arg and raw-response=true
- D. run 'ad-delete-user' command with 'user-dn' arg and using="Active Directory
正解：D
解説：
Query v2_instance_1"
質問 # 94
Reliability scores in XSOAR range from A through F. What do A and F stand for?
- A. F - Reliability cannot be judged, A - Completely Reliable
- B. F - Not reliable, A - Usually Reliable
- C. F - Unreliable, A - Completely Reliable
- D. F - Not usually reliable, A - Fairly Reliable
正解：C
質問 # 95
An XSOAR engineer has been tasked with exporting all indicators from the production environment in the last 90 days. The final report needs to be in CSV format containing all indicator fields. How can this task be achieved?
- A. Run the command !GetIndicatorsByQuery in CLI with its default arguments and export all indicators in the last 90 days.
- B. Run the command !findIndicators in CLI with the query firstSeen:>="90 days ago" and export to CSV.
- C. In the Threat Intel page, add query firstSeen:>="90 days ago", select All columns in Table View, and click Export to export as a CSV.
- D. SSH into the server and copy the indicator's database.
正解：C
質問 # 96
In which two scenarios would it be appropriate to implement a loop for a sub-playbook? (Choose two.)
- A. In repetitive process flows with no more than 10 loops
- B. In repetitive process flows to iterate for each playbook input
- C. When continuously ingesting incidents from third-party systems
- D. In repetitive processes that requires sub-playbook re-execution
正解：B、C
質問 # 97
What are the out-of-the-box aggregate values that can be applied on widgets data?
- A. Min, Max, Count, Average, Custom Group By
- B. Count, Average, Sum, Min, Max
- C. Min, Max, Count, Average, Custom Transformers
- D. Count, Sum, Min, Max, Transformers
正解：B
質問 # 98
Management would like to get an incident report automatically following an incident's closure. How would this be accomplished?
- A. Manually create an 'Incident Report'
- B. Create an 'Incident Report' from the Reports page
- C. Define a task in a playbook to generate an incident report before the closure occurs
- D. Configure post-processing using a script
正解：B
質問 # 99
An engineer notices that playbooks only start once the user clicks the 'investigate' button and he/she would like the playbook to start automatically.
How can this be implemented?
- A. Add the !startinvestigation automation to the beginning of the playbook
- B. Select 'Run playbook automatically' from the incident type settings
- C. Add the playbook to the integration's settings
- D. Select 'Run playbook automatically' from the integration settings
正解：C
質問 # 100
What happens when an integration is deprecated?
- A. The integration commands in a playbook can be used, but it will fail at runtime
- B. The configuration settings will be lost and the integration will no longer function
- C. The integration commands can be used, but it is recommended to update to the latest content pack
- D. The integration commands in a playbook can no longer be used
正解：B
質問 # 101
Which of the following is a prerequisite to editing out-of-the-box (OOTB) content?
- A. Go to Settings > About >Troubleshooting and set a flag to allow custom content.
- B. Detach the content item you want to edit from the Marketplace.
- C. Register a user account with support.paloaltonetworks.com .
- D. Download the content from the Marketplace.
正解：A
質問 # 102
Which two statements describe how timers are configured to start and stop automatically in a playbook?
(Choose two.)
- A. Use a field of Number to count the number of seconds elapsed between two tasks
- B. After the playbook has run, calculate the total time taken and set the timer field with this value
- C. To begin counting time taken, add a task in the playbook with automation startTimer. To end the counting, add a task with automation stopTimer
- D. From the Timers tab of the playbook task, choose the action for the timer and the timer field to perform the action on
正解：B、D
質問 # 103
Which three support types are included in the Marketplace Content Packs? (Choose three.)
- A. Customer supported
- B. Contex XSOAR supported
- C. Community supported
- D. Partner supported
- E. Prisma Cloud supported
正解：B、C、D
質問 # 104
Which two functions in XSOAR are incident types used for? (Choose two.)
- A. To facilitate role based access to XSOAR incidents
- B. To classify indicators extracted in XSOAR incidents to their respective types
- C. To classify events ingested from various sources into the relevant types
- D. To run dedicated playbooks for different event types
正解：B、C
質問 # 105
Which two capabilities do Automation script settings include? (Choose two.)
- A. Define 'outputs'
- B. Correlate to incident types
- C. Define 'parameters'
- D. Set password protection
正解：A、D
質問 # 106
What is a primary use case of data collection tasks?
- A. To allow multi-
正解：A
質問 # 107
Where do you navigate to monitor and improve the system performance and resilience for hosts in a multitenant environment?
- A. Settings > About > Troubleshooting, in the main host account. Each host has a System Diagnostics page.
- B. Settings > Account Management > Hosts, in the main host account. Each host has a System Diagnostics page.
- C. Settings > Advanced > System Diagnostics, in the main host account. Each host has a System Diagnostics page.
- D. Settings > About > System Diagnostics, in the main host account. Each host has a System Diagnostics page.
正解：D
質問 # 108
Management would like to get an incident report automatically following an incident's closure. How would this be accomplished?
- A. Manually create an 'Incident Report'
- B. Define a task in a playbook to generate an incident report before the closure occurs
- C. Configure post-processing using a script
- D. Create an 'Incident Report' from the Reports page
正解：C
質問 # 109
Which content type cannot be managed using remote repositories?
- A. Exclusion List
- B. Lists
- C. Jobs
- D. Pre-processing rules
正解：B
質問 # 110
To avoid exceeding API quotas for third-party services, indicators are only updated after the indicator cache expiration period. What is the default cache expiration period for indicators in XSOAR (minutes/days)?
- A. 21,600 minutes (15 days)
- B. 10,080 minutes (7 days)
- C. 20,160 minutes (14 days)
- D. 4,320 minutes (3 days)
正解：D
質問 # 111
In which three locations can an engineer try to find information, when troubleshooting a failed integration instance error produced by the test button? (Choose three.)
- A. The playground war room
- B. The log bundle
- C. The source code for an integration
- D. The error message returned directly below the button
- E. The audit log
正解：B、C、D
質問 # 112
......
PCSAE 資格認定は、Palo Alto Networks セキュリティプラットフォームを使用するセキュリティプロフェッショナルにとって貴重な資格です。この資格認定試験は、候補者のセキュリティ自動化の知識とスキルをさまざまな分野で試験するように設計され、Palo Alto Networks Education Services が提供しています。PCSAE 資格認定を取得することで、セキュリティプロフェッショナルは、キャリアの見通しを向上させ、サイバーセキュリティ業界での専門的な開発への取り組みを示すことができます。
無料PCSAE試験問題集試験点数を伸ばそう：https://www.goshiken.com/Palo-Alto-Networks/PCSAE-mondaishu.html