Paloalto Networks PCSAE Palo Alto Networks Certified Security Automation Engineer Online Training
Paloalto Networks PCSAE Online Training
The questions for PCSAE were last updated at Feb 18,2025.
- Exam Code: PCSAE
- Exam Name: Palo Alto Networks Certified Security Automation Engineer
- Certification Provider: Paloalto Networks
- Latest update: Feb 18,2025
In which two scenarios would it be appropriate to implement a loop for a sub-playbook? (Choose two.)
- A . In repetitive process flows to iterate for each playbook input
- B . When continuously ingesting incidents from third-party systems
- C . In repetitive process flows with no more than 10 loops
- D . In repetitive processes that requires sub-playbook re-execution
What is the default landing page for a new user in XSOAR?
- A . Dashboards
- B . Threat Intel
- C . Settings
- D . Marketplace
Which of the following are valid methods to contribute custom content? (Choose three.)
- A . Submit content directly through feature requests
- B . Private GitHub repository submission for premium content
- C . A Github pull request on the public XSOAR Content Repository
- D . Using the marketplace interface to upload the content
- E . Using the content submission tool on live.paloaltonetworks.com
An automation returned an output called: csvReport.
What filter would be used to check if the automation returned results?
- A . Contains/Includes
- B . Equals/Matches
- C . In/In list
- D . Is defined/Exist
You can customize most aspects of the incident layout, including which three of the following? (Choose three.)
- A . Which users have permissions to view the tabs
- B . Which roles have permissions to view the tabs
- C . Which dashboard settings are applied
- D . The information and how is it displayed
- E . Which tabs appear and in which order
An engineer would like to change an incidentās SLA according to the severity field changes.
How can the engineer achieve this task?
- A . Use a field trigger script
- B . Use a field display script
- C . Create a job that queries for incident severity changes
- D . Change the SLA manually every time the severity changes
Where do you navigate to monitor and improve the system performance and resilience for hosts in a multitenant environment?
- A . Settings > About > Troubleshooting, in the main host account. Each host has a System
Diagnostics page. - B . Settings > Advanced > System Diagnostics, in the main host account. Each host has a System Diagnostics page.
- C . Settings > Account Management > Hosts, in the main host account. Each host has a System Diagnostics page.
- D . Settings > About > System Diagnostics, in the main host account. Each host has a System Diagnostics page.
During configuration of the inputs of a sub-playbook in the main playbook, there is an option under the Loop tab called "For Each Input".
What is this option used to?
- A . To loop the sub-playbook over all context values present in the investigation
- B . To loop the sub-playbook over all incident fields for the given incident
- C . To loop the sub-playbook over all the fields marked as important
- D . To loop the sub-playbook over all defined sub-playbook inputs
Where are incident layouts customized?
- A . Settings > Object Setup > Incidents > Layouts
- B . Settings > Integrations > Instance configuration
- C . Settings > Object Setup > Indicators > Layouts
- D . Settings > Advanced > Incident Layouts
Which tag must be applied to an Automation Script in order for it to be available when configuring an Indicator Type?
- A . reputation-script
- B . enrich
- C . reputationScript
- D . reputation