PCSAE 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
In which two ways can data be transferred between playbooks and sub-playbooks? (Choose two.)

A.Inputs and outputs
B.Through integration context
C.Automatically extracted by sub-playbooks
D.From context data, if context is shared globally

正解:

Question No : 2
Which component can be part of a load balancing group?

A.Distributed database
B.D2 agent
C.Engine
D.Load balancing server

正解:
Explanation:
Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar-admin/engines/understand-demisto-engines.html

Question No : 3
Which two capabilities do Automation script settings include? (Choose two.)

A.Define ‘parameters’
B.Correlate to incident types
C.Define ‘outputs’
D.Set password protection

正解:

Question No : 4
DRAG DROP
Match the action with the most appropriate playbook task type.

正解:

Explanation:
https://www.jaacostan.com/2021/02/palo-alto-cortex-xsoar-playbook-icons.html

Question No : 5
Which two statements accurately describe layouts? (Choose two.)

A.Layouts override classification and mapping
B.New tabs can be added to the incident layout
C.Layouts can display incident information and custom fields
D.Layouts add or remove custom fields from an incident type

正解:

Question No : 6
Which three statements are true about the Marketplace? (Choose three.)

A.Allows reverting back to a previous version of a content pack
B.Enables users to participate in the community by sharing content
C.Publishes content without additional review from the Cortex XSOAR team
D.Allows uploading of content in additional languages
E.Offers granularity in installation through content packs

正解:

Question No : 7
Which two statements describe how timers are configured to start and stop automatically in a playbook? (Choose two.)

A.Use a field of Number to count the number of seconds elapsed between two tasks
B.After the playbook has run, calculate the total time taken and set the timer field with this value
C.To begin counting time taken, add a task in the playbook with automation startTimer. To end the counting, add a task with automation stopTimer
D.From the Timers tab of the playbook task, choose the action for the timer and the timer field to perform the action on

正解:

Question No : 8
Which built-in automation/command cab be used to change an incident’s type?

A.setIncident
B.Set
C.GetFieldsByIncidentType
D.modifyIncidentFields

正解:
Explanation:
Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar-admin/incidents/incidents-management/incident-fields/field-trigger-scripts.html

Question No : 9
Which three scripting languages can an engineer use to write XSOAR automations? (Choose three.)

A.Python
B.Perl
C.Go
D.JavaScript
E.Powershell

正解:
Explanation:
Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/playbooks/automations.html

Question No : 10
After enriching a username using Active Directory, an engineer would like to send an email to the user’s manager. However, this functionality is not part of the command output. The engineer checks with raw-response=true and notices that the manager’s email is returned, but not saved in the context.
How can the engineer save the data so it will be accessible?

A.Mark ignore output = true
B.Use extend-context
C.Use raw-response = save
D.Mark ignore input = true

正解:
Explanation:
Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar-admin/playbooks/extend-context/extend-context-using-the-command-line.html

Question No : 11
What are three different loop types in a playbook? (Choose three.)

A.Automation
B.Built-in
C.Data collection
D.Conditional
E.For-each

正解:

Question No : 12
An engineer notices that playbooks only start once the user clicks the ‘investigate’ button and he/she would like the playbook to start automatically.
How can this be implemented?

A.Add the playbook to the integration’s settings
B.Select ‘Run playbook automatically’ from the incident type settings
C.Add the !startinvestigation automation to the beginning of the playbook
D.Select ‘Run playbook automatically’ from the integration settings

正解:

Question No : 13
In which two locations can filters and transformers be used in XSOAR? (Choose two.)

A.Classification and Mapping
B.Playbook Tasks
C.Evidence Fields
D.Incident Fields

正解:
Explanation:
Reference: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/playbooks/filters-and-transformers.html

Question No : 14
DRAG DROP
Match the appropriate action to the layout type.

正解:

Question No : 15
DRAG DROP
Arrange these steps in the order that they occur during an incident fetch.

正解:

Paloalto Networks PCSAE 問題練習