Palo Alto Networks PCSAE Quiz 1 Topic 1 Questions 1-5

Question: 1

After enriching a username using Active Directory, an engineer would like to send an email to the user's manager. However, this functionality is not part of the command output. The engineer checks with raw- response=true and notices that the manager's email is returned, but not saved in the context.

How can the engineer save the data so it will be accessible?

AMark ignore output = true

BUse extend-context

CUse raw-response = save

DMark ignore input = true

Show Answer

Question: 2

What is the difference between labels and fields?

AFields can be used in playbooks and labels cannot

BFields are indexed in the database and labels are not

CLabels can be used in queries and fields cannot

DLabels are indexed in the database and fields are not

Show Answer

Question: 3

A SOC analyst needs to retrieve the list of all open phishing incidents in the last 30 days. What is the correct query to use?

A-status:closed -category:job type:Phishing created:>='30 days ago'

Bstatus:closed -category:job & type:Phishing created:>='30 days ago'

C-status:closed -category:job & type:Phishing created:<='30 days ago'

D-status:closed -category:job type:Phishing created:='30 days ago'

Show Answer

Question: 4

What are inputs and outputs in reference to a Playbook Development Lifecycle? (Choose three.)

AInputs are data pieces that are present in the playbook

BInputs are data pieces that are present in the task

COutputs are used as incident trigger for playbook

DOutputs can be derived from the result of a task or command

EInputs are the data fields parsed by the Classifier

Show Answer

Question: 5

In which three locations can an engineer try to find information, when troubleshooting a failed integration instance error produced by the test button? (Choose three.)

AThe audit log

BThe log bundle

CThe source code for an integration

DThe error message returned directly below the button

EThe playground war room

Show Answer

Palo Alto Networks PCSAE Quiz:1 Topic:1 Questions:1-5