Examice

Exam PCSAE All QuestionsBrowse all questions from this exam

Go to Exam

Question 132

Which action would enable notifications of incident fetch fails?

Create a new integration that monitors the incident fetch and sends an email if the fetch fails.

Schedule a job that runs and monitors incidents in Cortex XSOAR that will send an email if there are no new incidents.

Add a server config to notify when incident fetch fails.

Create a custom playbook that sends an email each time the fetch fails.

Correct Answer: C

To enable notifications of incident fetch fails, the most direct and appropriate action is to add a server configuration to notify when the incident fetch fails. This configuration can be set up to automatically trigger notifications in case of any issues, ensuring that alerts are sent without requiring additional complex setups like creating new integrations, jobs, or custom playbooks.

Discussion

piipoOption: C

https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.8/Cortex-XSOAR-Administrator-Guide/Fetch-Incidents-From-an-Integration-Instance