Free Palo Alto Networks PCSAE Exam Dumps Questions & Answers

Which two situations would an engineer consider when configuring classification and mapping for an incident type? (Choose two.)

• A.When manually creating an incident from the UI
• B.When adding a new analyst account to XSOAR
• C.When fetching many different incident types from a single mailbox
• D.When creating incidents from the XSOAR REST API

A SOC manager built a dashboard and would like to share the dashboard with other team members. How would the SOC manager create a dashboard that meets this requirement?

• A.Dashboard is shared to all XSOAR users in a selected role
• B.Manually share the dashboard through user emails
• C.Propagate the dashboard based on SAML authentication
• D.Dashboard is shared to all XSOAR users

Match the corresponding action with the appropriate playbook tasks.

Correct Answer:

Reference:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar-admin/playbooks/playbooks- overview.html

What is the most effective way to correlate multiple raw events coming from a SIEM and link them together?

• A.Ingest all raw events, run a custom script to find the relationship between them and proceed to link them together
• B.Configure a pre-process rule to link related events as they are ingested
• C.Manually go through the incidents created by the raw events and link related incidents
• D.Process all alerts by running the respective playbook and link related incidents during post-processing

Which of the following is a feature of XSOAR automations?

• A.can run on multiple docker containers
• B.can be written in C++
• C.can be password protected
• D.can be set to run on a scheduled basis in the automation settings