Free Paloalto Networks PCSAE Practice Exam with Questions & Answers

Incident Summary View

My Incidents

My Threat Landscape

My Dashboard

The new job form changes based on the threat intel feed integration configuration

The new job form can be edited from the Indicator Feed incident type editor

The new job form for a threat intel feed job cannot be edited

The new job form can be edited from the threat intel feeds integration settings

Layouts override classification and mapping

New tabs can be added to the incident layout

Layouts can display incident information and custom fields

Layouts add or remove custom fields from an incident type

To run dedicated playbooks for different event types

To classify events ingested from various sources into the relevant types

To classify indicators extracted in XSOAR incidents to their respective types

To facilitate role based access to XSOAR incidents

2 main DBs, 1 application server, 2 node servers

1 main DB, 1 application server, 3 node servers

2 application servers, 1 main DB, 1 node server

1 application server, 2 main DBs, 1 node server

The post-processing tag must be added to the automation

Post-processing scripts must be added at the end of playbooks

Post-processing scripts must be added from the Incident Type editor

Post-processing scripts must be added from the Post-Process Rules editor

The commands must return a proper result to the war room for the analysts to understand

The code may not be written to XSOAR standards

The integrations are locked and cannot be edited with additional commands

The custom integration will not be maintained and updated by XSOAR content team

${incident.sourceip}

${incident.Source_IP}

${incident.srcip}

${incident.Source IP}