PCSAE Online Practice Questions and Answers

Which two causes may be occurring if an integration test is working, but the integration is not fetching incidents? (Choose two.)

A. The 'Fetches Incidents' option may not have been enabled

B. There are no new events from the external service

C. The first fetch should be manually triggered to start the fetching process

D. It can take up to 1-hour before incidents are initially fetched

An engineer defined a dashboard which allows important metrics to be displayed. The engineer would like to make this dashboard the default dashboard. How can it be accomplished?

A. Default Dashboard can be defined by `Role'

B. Use the server configuration key: default.dashboards

C. Save the dashboard as a widget and apply it to all users

D. Right click on the dashboard tab and `Set as Default'

Threat Intel search queries can be shared with which of the following?

A. Users defined in the platform (email or username)

B. Other organizations via the Marketplace

C. Users outside XSOAR via email invite

D. Roles defined in the platform

Which two statements describe how timers are configured to start and stop automatically in a playbook? (Choose two.)

A. Use a field of Number to count the number of seconds elapsed between two tasks

B. After the playbook has run, calculate the total time taken and set the timer field with this value

C. To begin counting time taken, add a task in the playbook with automation startTimer. To end the counting, add a task with automation stopTimer

D. From the Timers tab of the playbook task, choose the action for the timer and the timer field to perform the action on

Whar are possible war room result (entry) types?

A. Context, file, error, image

B. Note, indicator, error, image

C. Video, file, error, image

D. Note, file, error, image

When browsing the Marketplace for new content packs, which details about each pack are you able to view?

A. The integration's source code

B. A summary of each version history

C. A test instance for the content pack

D. The source code of each playbook

An engineer asked for a specific command in an integration but the capability does not exist. The engineer decided to edit the existing integration by copying the integration and adding the needed commands.

What is the main concern when adding these commands?

A. The commands must return a proper result to the war room for the analysts to understand

B. The code may not be written to XSOAR standards

C. The integrations are locked and cannot be edited with additional commands

D. The custom integration will not be maintained and updated by XSOAR content team

In which two options can an automation script be executed? (Choose two.)

A. Engine

B. Integration

C. War room

D. Playbook

Which field type provides an interactive and editable display of table-based data?

A. HTML

B. Grid (table)

C. Markdown

D. Multi Select

When creating a new tab in the layout, which section cannot be added?

A. Retrieve widget chart based on script

B. Related incidents

C. War room entries picked by entry query

D. Incident team members