2021 PCSAE Premium Files Test pdf - Free Dumps Collection [Q48-Q67]

Share

2021 PCSAE Premium Files Test pdf - Free Dumps Collection

 Get ready to pass the PCSAE Exam right now using our Palo Alto Networks Certification  Exam Package

NEW QUESTION 48
Which two situations would an engineer consider when configuring classification and mapping for an incident type? (Choose two.)

  • A. When adding a new analyst account to XSOAR
  • B. When creating incidents from the XSOAR REST API
  • C. When manually creating an incident from the UI
  • D. When fetching many different incident types from a single mailbox

Answer: B,C

 

NEW QUESTION 49
What does Script helper contain?

  • A. Automation version history
  • B. Automation timeout configuration
  • C. Available commands
  • D. Permission settings

Answer: C

 

NEW QUESTION 50
What are two main uses of context data? (Choose two.)

  • A. Store incident information in JSON format
  • B. Pass data between to-do tasks
  • C. Pass data between playbook tasks
  • D. Store incident information in XML format

Answer: A,C

 

NEW QUESTION 51
Which three options can be defined in the layout settings? (Choose three.)

  • A. Permission to view the tab based on 'Roles'
  • B. Permission to view the tab based on 'Users'
  • C. Delete built-in tabs including the war room
  • D. Set of fields to present
  • E. Dynamic sections

Answer: A,D,E

 

NEW QUESTION 52
After enriching a username using Active Directory, an engineer would like to send an email to the user's manager. However, this functionality is not part of the command output. The engineer checks with raw- response=true and notices that the manager's email is returned, but not saved in the context.
How can the engineer save the data so it will be accessible?

  • A. Use raw-response = save
  • B. Mark ignore output = true
  • C. Use extend-context
  • D. Mark ignore input = true

Answer: C

 

NEW QUESTION 53
An engineer deployed two different instances of Active Directory for each organization site. As part of account enrichment use case, the engineer would like to delete a user from one specific site.
Which command will accomplish this?

  • A. run 'ad-delete-user' command with 'user-dn' arg and using-brand="Active Directory Query v2"
  • B. run 'ad-delete-user' command with 'user-dn' arg and using="Active Directory Query v2_instance_1"
  • C. run 'ad-delete-user' command with 'user-dn' arg and ignore-outputs=true
  • D. run 'ad-delete-user' command with 'user-dn' arg and raw-response=true

Answer: A

 

NEW QUESTION 54
Which two input requirements are needed to train a machine learning model? (Choose two.)

  • A. Incident Field
  • B. Verdict Label
  • C. 3000 Incidents
  • D. Incident Type

Answer: A,D

 

NEW QUESTION 55
How long is the trial period for paid content packs?

  • A. 60 days
  • B. 30 days
  • C. 14 days
  • D. 7 days

Answer: B

 

NEW QUESTION 56
Which XSOAR architecture would be recommended for Managed Security Service Providers (MSSP)?

  • A. Multi-region
  • B. Distributed database
  • C. Dev-Prod
  • D. Multi-tenant

Answer: D

 

NEW QUESTION 57
Which configuration is a valid distributed database (DB) implementation?

  • A. 1 application server, 2 main DBs, 1 node server
  • B. 1 main DB, 1 application server, 3 node servers
  • C. 2 application servers, 1 main DB, 1 node server
  • D. 2 main DBs, 1 application server, 2 node servers

Answer: C

 

NEW QUESTION 58
An engineer's organization system is registered in the following manner: <SiteName-SystemID- Username>.
The engineer created a new indicator type for detecting systems using regex. The engineer would now like the username to be created as a separate 'User' indicator automatically once a system is found.
What is the most efficient way for the engineer to achieve this?

  • A. Create a new indicator type of the internal username and set a formatting script to extract only the username
  • B. Create a custom indicator field named 'username' and link it to the internal system indicator
  • C. Change the reputation command for the internal system indicator type
  • D. Create a new indicator type of the internal username and have the regex included on any string that has dash at the beginning

Answer: C

 

NEW QUESTION 59
Which two options may be added when a content pack is being installed? (Choose two.)

  • A. Other content packs
  • B. Indicator layouts
  • C. Lists
  • D. Roles

Answer: C,D

 

NEW QUESTION 60
By default, automation written in which language will be executed in a Docker container?

  • A. Perl
  • B. Go
  • C. JavaScript
  • D. Python

Answer: B

 

NEW QUESTION 61
Match the appropriate action to the layout type.

Answer:

Explanation:

 

NEW QUESTION 62
Which three authentication methods are supported when logging into XSOAR? (Choose three.)

  • A. OTP token
  • B. RADIUS
  • C. User name and password
  • D. SAML
  • E. Active Directory authentication

Answer: B,D,E

 

NEW QUESTION 63
What is a primary use case of data collection tasks?

  • A. To generate new widgets for a dashboard
  • B. To automate tasks such as parsing a file or enriching indicators
  • C. To determine different paths in a playbook
  • D. To allow multi-question surveys without authentication restrictions

Answer: D

 

NEW QUESTION 64
How would context data be filtered to receive only malicious indicator values with DBotScore?

  • A. Get DBotScore.value where DBotScore.Score (Larger or equals) 4
  • B. Get DBotScore where DBotScore.Score (Larger than) 1
  • C. Get DBotScore.value where DBotScore.Score (equals (int)) 3
  • D. Get DBotScore where DBotScore.Score (Larger or equals) 2

Answer: C

 

NEW QUESTION 65
Which two reasons would lead an engineer to create a custom widget? (Choose two.)

  • A. To visualize a custom query
  • B. To visualize context data
  • C. To visualize complex incident data calculations
  • D. To visualize server configuration keys
  • E. To visualize XSOAR list data

Answer: A,B

 

NEW QUESTION 66
What can be added to offload integration instance processing from the main server?

  • A. Engine
  • B. Application server
  • C. Database node
  • D. Development server

Answer: C

 

NEW QUESTION 67
......

Master 2021 Latest The Questions Palo Alto Networks Certification and Pass PCSAE  Real Exam!: https://www.2pass4sure.com/Palo-Alto-Networks-Certification/PCSAE-actual-exam-braindumps.html

A fully updated 2021 PCSAE Exam Dumps exam guide from training expert 2Pass4sure: https://drive.google.com/open?id=1NzhfCXgK-MlpANoGYhOOtABR9902GG3H