Free Paloalto Networks PCSAE Practice Exam with Questions & Answers | Set: 4

Run the command !GetIndicatorsByQuery in CLI with its default arguments and export all indicators in the last 90 days.

SSH into the server and copy the indicator's database.

In the Threat Intel page, add query firstSeen:>="90 days ago", select All columns in Table View, and click Export to export as a CSV.

Run the command !findIndicators in CLI with the query firstSeen:>="90 days ago" and export to CSV.

Using the demisto_error() function

Using a print statement

Using the demisto.debug() function

Using the return_error() function

Download the content from the Marketplace.

Go to Settings > About >Troubleshooting and set a flag to allow custom content.

Register a user account with support.paloaltonetworks.com .

Detach the content item you want to edit from the Marketplace.

When creating incidents from the XSOAR REST API

When manually creating an incident from the UI

When adding a new analyst account to XSOAR

When fetching many different incident types from a single mailbox

Planning > Incident Ingestion > Incident Creation > Mapping and Classification > Pre-processing > Playbook runs > Post-processing

Planning > Incident Ingestion > Pre-processing > Incident Creation > Mapping and Classification > Playbook runs > Post-processing

Planning > Incident Ingestion > Pre-processing > Mapping and Classification > Incident Creation > Playbook runs > Post-processing

Planning > Incident Ingestion > Mapping and Classification > Pre-processing > Incident Creation > Playbook runs > Post-processing

XSOAR D2 agent

external integration command

XSOAR shared agent

common automation script

Marketplace access

Application with API

Private key/Public key integration

Multitenant deployment

Just after the incident is created

Just after the pre-processing is executed

Just after the playbook is executed

Just after the Close Incident button is clicked

OTP token

User name and password

SAML

Active Directory authentication

RADIUS

Create a custom playbook that sends an email each time the fetch fails.

Create a new integration that monitors the incident fetch and sends an email if the fetch fails.

Schedule a job that runs and monitors incidents in XSOAR that will send an email if there are no new incidents.

Add a server config to notify when incident fetch fails.