Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free Paloalto Networks PCSAE Practice Exam with Questions & Answers | Set: 3

Questions 21

In order to automatically run a playbook on the indicators fetched by an integration, what would an XSOAR Administrator setup?

Options:
A.

Cron job

B.

Time triggered job

C.

Feed triggered job

D.

REST API job

Paloalto Networks PCSAE Premium Access
Questions 22

Match the corresponding action with the appropriate playbook tasks.

PCSAE Question 22

Options:
Questions 23

An engineer would like to present a trend using widgets to compare to a previous week’s data. Which two methods will allow the engineer to meet the requirement? (Choose two.)

Options:
A.

Create widget of type Line, check ‘Display Trend’ and define as 7 days ago

B.

Create a custom widget using a new incident query

C.

Create widget of type Number, check ‘Display Trend’ and define as 7 days ago

D.

Create a custom widget using a script

Questions 24

An organization has recently acquired another company as its subsidiary. The subsidiary has its infrastructure on AWS cloud as illustrated in the image below:

PCSAE Question 24

The organization wants to use the mail server location on the subsidiary's cloud to send emails. Without acquiring additional licenses, which XSOAR component can fulfill the requirement?

Options:
A.

XSOAR D2 Agents, to send the required emails.

B.

An XSOAR engine that is downloaded from the XSOAR server and installed within the subsidiary.

C.

Another XSOAR server that uses the same license as their primary XSOAR server.

D.

A Linux server connected with an XSOAR server using SSH integration. Commands can be run remotely to access the mail server.

Questions 25

Which two solutions are available to scale an overloaded XSOAR environment? (Choose two.)

Options:
A.

Add a distributed database server

B.

Add an indexing server

C.

Add a live backup server (disaster recovery)

D.

Add an engine

Questions 26

Which task type would be used to verify/check that an integration was enabled?

Options:
A.

Standard task

B.

Conditional task

C.

Section Header task

D.

Data Collection task

Questions 27

How would context data be filtered to receive only malicious indicator values with DBotScore?

Options:
A.

Get DBotScore.value where DBotScore.Score (Larger or equals) 4

B.

Get DBotScore.value where DBotScore.Score (equals (int)) 3

C.

Get DBotScore where DBotScore.Score (Larger than) 1

D.

Get DBotScore where DBotScore.Score (Larger or equals) 2

Questions 28

What is an example of a generic reputation command?

Options:
A.

!ip

B.

!getReputation

C.

!reputation

D.

!enrichIndicator

Questions 29

Inside the Incidents table view, which actions can be performed on the selected incidents? (Choose two.)

Options:
A.

Run Command, Export, and Close and Delete for all selected incidents regardless of their status

B.

Assign, Edit, and Mark as Duplicate for all selected incidents regardless of their status

C.

Run Command for all selected incidents having Active status

D.

Export incidents as JSON and change incident status

Questions 30

An engineer would like to change an incident’s SLA according to the severity field changes. How can the engineer achieve this task?

Options:
A.

Use a field trigger script

B.

Use a field display script

C.

Create a job that queries for incident severity changes

D.

Change the SLA manually every time the severity changes

Exam Code: PCSAE
Certification Provider: Paloalto Networks
Exam Name: Palo Alto Networks Certified Security Automation Engineer
Last Update: Jun 24, 2025
Questions: 156