Download Palo Alto Networks Certified Security Automation Engineer.VCEPlus.PCSAE.2021-05-06.1e.78q.vcex

Which two advanced attributes can be applied to incident fields when editing? (Choose two.)

• A: Set a field trigger script
• B: Associate to an incident type
• C: Change field type
• D: Change field name

Correct Answer: AB

Given an incident with three files, how could the name of the second file be referenced?

• A: ${Files.[2].Name}
• B: ${Files.Name.[2]}
• C: ${File.[1].Name}
• D: ${File.Name.[1]}

Correct Answer: B

Which component can be part of a load balancing group?

• A: Distributed database
• B: D2 agent
• C: Engine
• D: Load balancing server

Correct Answer: C

Which method accesses a field called ‘User Mail’ in a playbook?

• A: ${incident.usermail}
• B: ${incident.User Mail}
• C: ${incident.UserMail}
• D: ${usermail}  

Correct Answer: A

A SOC manager built a dashboard and would like to share the dashboard with other team members.  
How would the SOC manager create a dashboard that meets this requirement?

• A: Manually share the dashboard through user emails
• B: Dashboard is shared to all XSOAR users
• C: Propagate the dashboard based on SAML authentication
• D: Dashboard is shared to all XSOAR users in a selected role

Correct Answer: D

Which two methods will allow data to be saved in incident fields within a playbook? (Choose two.)

• A: setFields
• B: Field mapping  
• C: setIncident
• D: Layout inline editing

Correct Answer: BC

Which built-in automation/command cab be used to change an incident’s type?

• A: setIncident
• B: Set
• C: GetFieldsByIncidentType  
• D: modifyIncidentFields

Correct Answer: A

An engineer notices that playbooks only start once the user clicks the ‘investigate’ button and he/she would like the playbook to start automatically.  
How can this be implemented?

• A: Add the playbook to the integration’s settings
• B: Select ‘Run playbook automatically’ from the incident type settings
• C: Add the !startinvestigation automation to the beginning of the playbook
• D: Select ‘Run playbook automatically’ from the integration settings

Correct Answer: A

Which two causes may be occurring if an integration test is working, but the integration is not fetching incidents? (Choose two.)  
 

• A: The ’Fetches Incidents’ option may not have been enabled
• B: There are no new events from the external service
• C: The first fetch should be manually triggered to start the fetching process
• D: It can take up to 1-hour before incidents are initially fetched

Correct Answer: AC

Which two capabilities do Automation script settings include? (Choose two.)

• A: Define ‘parameters’
• B: Correlate to incident types
• C: Define ‘outputs’
• D: Set password protection

Correct Answer: BD