A fully updated 2021 PCSAE Exam Dumps exam guide from training expert ExamsTorrent
Provides complete coverage of every objective on exam and exam preparation PCSAE
NEW QUESTION 49
Which XSOAR architecture would be recommended for Managed Security Service Providers (MSSP)?
- A. Multi-region
- B. Distributed database
- C. Dev-Prod
- D. Multi-tenant
Answer: D
NEW QUESTION 50
What is a primary use case of data collection tasks?
- A. To generate new widgets for a dashboard
- B. To automate tasks such as parsing a file or enriching indicators
- C. To determine different paths in a playbook
- D. To allow multi-question surveys without authentication restrictions
Answer: D
NEW QUESTION 51
What are three different loop types in a playbook? (Choose three.)
- A. Data collection
- B. For-each
- C. Conditional
- D. Automation
- E. Built-in
Answer: A,B,C
NEW QUESTION 52
Match the action with the most appropriate playbook task type.
Answer:
Explanation:
Explanation
https://www.jaacostan.com/2021/02/palo-alto-cortex-xsoar-playbook-icons.html
NEW QUESTION 53
By default, automation written in which language will be executed in a Docker container?
- A. Perl
- B. Go
- C. JavaScript
- D. Python
Answer: B
NEW QUESTION 54
When uploading content, which two options could the upload include? (Choose two.)
- A. Fields
- B. Reports
- C. Indicators
- D. Incidents
Answer: C,D
NEW QUESTION 55
Which two features does XSOAR offer to help recover from a server failure? (Choose two.)
- A. Distributed database
- B. Live backup (disaster recovery)
- C. Local backup
- D. Backup data to XSOAR engines
Answer: B,D
NEW QUESTION 56
What can be added to offload integration instance processing from the main server?
- A. Engine
- B. Application server
- C. Database node
- D. Development server
Answer: C
NEW QUESTION 57
How would context data be filtered to receive only malicious indicator values with DBotScore?
- A. Get DBotScore.value where DBotScore.Score (Larger or equals) 4
- B. Get DBotScore where DBotScore.Score (Larger than) 1
- C. Get DBotScore.value where DBotScore.Score (equals (int)) 3
- D. Get DBotScore where DBotScore.Score (Larger or equals) 2
Answer: C
NEW QUESTION 58
In which two locations can filters and transformers be used in XSOAR? (Choose two.)
- A. Classification and Mapping
- B. Evidence Fields
- C. Playbook Tasks
- D. Incident Fields
Answer: C,D
NEW QUESTION 59
How long is the trial period for paid content packs?
- A. 60 days
- B. 30 days
- C. 14 days
- D. 7 days
Answer: B
NEW QUESTION 60
Which two advanced attributes can be applied to incident fields when editing? (Choose two.)
- A. Set a field trigger script
- B. Change field name
- C. Change field type
- D. Associate to an incident type
Answer: A,D
NEW QUESTION 61
How is data transferred between playbook tasks?
- A. Input from the indicator page
- B. Directly from a previous task
- C. Over war room results
- D. Read/Write from context data
Answer: D
NEW QUESTION 62
An engineer's organization system is registered in the following manner: <SiteName-SystemID- Username>.
The engineer created a new indicator type for detecting systems using regex. The engineer would now like the username to be created as a separate 'User' indicator automatically once a system is found.
What is the most efficient way for the engineer to achieve this?
- A. Create a new indicator type of the internal username and set a formatting script to extract only the username
- B. Create a custom indicator field named 'username' and link it to the internal system indicator
- C. Change the reputation command for the internal system indicator type
- D. Create a new indicator type of the internal username and have the regex included on any string that has dash at the beginning
Answer: C
NEW QUESTION 63
In which two options can an automation script be executed? (Choose two.)
- A. War room
- B. Engine
- C. Integration
- D. Playbook
Answer: A,D
NEW QUESTION 64
Which component can be part of a load balancing group?
- A. Distributed database
- B. D2 agent
- C. Load balancing server
- D. Engine
Answer: D
NEW QUESTION 65
Which two methods will allow data to be saved in incident fields within a playbook? (Choose two.)
- A. Layout inline editing
- B. setIncident
- C. Field mapping
- D. setFields
Answer: B,C
NEW QUESTION 66
A SOC manager built a dashboard and would like to share the dashboard with other team members. How would the SOC manager create a dashboard that meets this requirement?
- A. Dashboard is shared to all XSOAR users
- B. Manually share the dashboard through user emails
- C. Dashboard is shared to all XSOAR users in a selected role
- D. Propagate the dashboard based on SAML authentication
Answer: C
NEW QUESTION 67
What can be used as integration parameters?
- A. URL, certificate, image
- B. URL, API key, port
- C. Token, query, playbook
- D. User-password, csv file, query
Answer: B
NEW QUESTION 68
Match the operations with the appropriate context.
Answer:
Explanation:
NEW QUESTION 69
After enriching a username using Active Directory, an engineer would like to send an email to the user's manager. However, this functionality is not part of the command output. The engineer checks with raw- response=true and notices that the manager's email is returned, but not saved in the context.
How can the engineer save the data so it will be accessible?
- A. Use raw-response = save
- B. Mark ignore output = true
- C. Use extend-context
- D. Mark ignore input = true
Answer: C
NEW QUESTION 70
Which three authentication methods are supported when logging into XSOAR? (Choose three.)
- A. OTP token
- B. RADIUS
- C. User name and password
- D. SAML
- E. Active Directory authentication
Answer: B,D,E
NEW QUESTION 71
......
Tested Material Used To PCSAE: https://www.examstorrent.com/PCSAE-exam-dumps-torrent.html
Steps Necessary To Pass The PCSAE Exam: https://drive.google.com/open?id=10a0SwhmAuse2j644Hy_88IVdPo_-0FGc