Palo Alto Networks PCSAE Exam Dumps

Question 6 of 137

Which two methods will allow data to be saved in incident fields within a playbook? (Choose two.)

setFields

Field mapping

setIncident

Layout inline editing

Correct Answer: A, C

To save data in incident fields within a playbook, you can use the setFields method, which is designed specifically for assigning values to fields. Additionally, the setIncident method is also used to update values within an incident, making these two methods the correct options. Field mapping and layout inline editing are not methods for saving data in playbook incident fields.

Question 7 of 137

DRAG DROP -

Match the action with the most appropriate playbook task type.

Select and Place:

Correct Answer:

https://www.jaacostan.com/2021/02/palo-alto-cortex-xsoar-playbook-icons.html

Question 8 of 137

An engineer notices that playbooks only start once the user clicks the `˜investigate' button and he/she would like the playbook to start automatically.

How can this be implemented?

Add the playbook to the integration's settings

Select 'Run playbook automatically' from the incident type settings

Add the !startinvestigation automation to the beginning of the playbook

Select 'Run playbook automatically' from the integration settings

Correct Answer: B

To make a playbook start automatically without needing to click the 'investigate' button, you need to select 'Run playbook automatically' in the incident type settings. This setting ensures that the playbook is triggered as soon as the incident is created, without any manual intervention.

Question 9 of 137

Which two causes may be occurring if an integration test is working, but the integration is not fetching incidents? (Choose two.)

The 'Fetches Incidents' option may not have been enabled

There are no new events from the external service

The first fetch should be manually triggered to start the fetching process

It can take up to 1-hour before incidents are initially fetched

Correct Answer: A, B

If the integration is not fetching incidents, one possible cause is that the 'Fetches Incidents' option may not have been enabled. Another possible cause is that there are no new events from the external service to fetch. These are two plausible reasons that align with common issues encountered in integration scenarios and cover both configuration and data availability aspects.

Question 10 of 137

Which two capabilities do Automation script settings include? (Choose two.)

Define 'parameters'

Correlate to incident types

Define 'outputs'

Set password protection

Correct Answer: A, C

Automation script settings typically include the capability to define 'parameters' and to define 'outputs'. Parameters allow for the configuration and customization of the script, while outputs specify the data that the script returns upon completion.