최신Palo Alto Networks Certified Security Automation Engineer - PCSAE무료샘플문제

A. Fields can be used in playbooks and labels cannot

B. Fields are indexed in the database and labels are not

C. Labels can be used in queries and fields cannot

D. Labels are indexed in the database and fields are not

A. Right click on the dashboard tab and 'Set as Default'

B. Use the server configuration key: default.dashboards

C. Save the dashboard as a widget and apply it to all users

D. Default Dashboard can be defined by 'Role'

A. Run the command !findIndicators in CLI with the query firstSeen:>="90 days ago" and export to CSV.

B. SSH into the server and copy the indicator's database.

C. In the Threat Intel page, add query firstSeen:>="90 days ago", select All columns in Table View, and click Export to export as a CSV.

D. Run the command !GetIndicatorsByQuery in CLI with its default arguments and export all indicators in the last 90 days.

A. No difference, the automation cannot be executed manually.

B. All the data, including the incident key will be deleted, and the context data will be completely empty.

C. All context data, except the incident key will be deleted.

D. All context data, including custom incident fields will be deleted, system incident fields will remain.

A. Using the marketplace interface to upload the content

B. Private GitHub repository submission for premium content

C. Submit content directly through feature requests

D. A Github pull request on the public XSOAR Content Repository

E. Using the content submission tool on live.paloaltonetworks.com

A. War room

B. Engine

C. Integration

D. Playbook

A. Read/Write from context data

B. Directly from a previous task

C. Over war room results

D. Input from the indicator page

A. Application with API

B. Multitenant deployment

C. Marketplace access

D. Private key/Public key integration

A. Settings

B. Dashboards

C. Threat Intel

D. Marketplace

A. Automatically from playbook tasks when the option is selected on the Advanced tab

B. Manually from the playbook task (mark as entry icon)

C. From the Notes section (mark as entry icon)

D. Manually directly from the War Room with the Actions drop-down

E. By running the command !MarkAsEvidence

A. can be set to run on a scheduled basis in the automation settings

B. can be password protected

C. can run on multiple docker containers

D. can be written in C++

A. Create a job that queries for incident severity changes

B. Change the SLA manually every time the severity changes

C. Use a field display script

D. Use a field trigger script

A. My Incidents

B. Incident Summary View

C. My Threat Landscape

D. My Dashboard

A. Dynamic fields

B. Pre-processing

C. Classification

D. Mirroring