Get Latest [Oct-2023] Conduct effective penetration tests using Prep4sureGuide PCSAE
Penetration testers simulate PCSAE exam PDF
NEW QUESTION # 40
What is the correct expression to use when filtering only PDF files?
- A. Use File.Name contains PDF
- B. Use File.Extension that does not equal (string comparison) PDF
- C. Use File.Extension equals (string comparison) PDF
- D. Use File.Extension contains (general) PDF
Answer: A
NEW QUESTION # 41
What happens when an integration is deprecated?
- A. The integration commands in a playbook can no longer be used
- B. The integration commands in a playbook can be used, but it will fail at runtime
- C. The configuration settings will be lost and the integration will no longer function
- D. The integration commands can be used, but it is recommended to update to the latest content pack
Answer: C
NEW QUESTION # 42
Which two components have their own context data? (Choose two.)
- A. Incident
- B. Sub-playbook
- C. Task
- D. Field
Answer: A,B
NEW QUESTION # 43
Multiple company assets were reported by vulnerability scanners as being vulnerable to CVE-2017-11882. This vulnerability affects applications installed on workstations. The SOC team needs to take action and apply the new vulnerability patch that was just released. The team must first create a cause for each of the identified assets in ServiceNow IT Service Management (ITSM), in order to notify the IT department. Next, the team creates a task in the main playbook, which extracts the list of assets from the scanner report.
After the list of assets are created, what are the two solutions that the SOC team could take so that a case could be created and a patch installed? (Choose two.)
- A. Set a key for storing the iteration number and create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Exit condition: iterator equal to count of the number of item in the list) and perform the following tasks:
- Increase the iterator value by one each time
- Active Directory User Enrichment based on the computerName
- Create the ServiceNow Record by adding the enrichment information - B. Create a sub-playbook with a single input containing the computer names that will loop 'For Each Input' and perform the following tasks:
- Active Directory User Enrichment based on the computerName
- Create the ServiceNow Record by adding the enrichment information
- Mark the ticket severity as Urgent - C. Set a key for storing the iteration number and create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Exit condition: iterator contains the count of the number of items in the list) and perform the following tasks:
- Active Directory User Enrichment based on the computerName
- Create the ServiceNow Record by adding the enrichment information
- Mark the ticket severity as Urgent - D. Create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Condition: AreValuesEqual - Exit on yes - left:1, right 1) and perform the following tasks:
- Active Directory User Enrichment based on the computerName
- Create the ServiceNow Record by adding the enrichment information
- Mark the ticket severity as Urgent
Answer: A,B
Explanation:
- Mark the ticket severity as Urgent
NEW QUESTION # 44
Match the operations with the appropriate context.
Answer:
Explanation:
NEW QUESTION # 45
What does the outgoing mapper support?
- A. Dynamic fields
- B. Pre-processing
- C. Classification
- D. Mirroring
Answer: B
NEW QUESTION # 46
Which two methods are used to add new content to the XSOAR Content Repository? (Choose two.)
- A. Use the XSOAR GitHub Contribution Guide to add the contribution to the standard content
- B. Create content and add it to the standard content by contributing through the Marketplace
- C. Create a support ticket with the custom content for review by the support team
- D. Any custom content will be automatically uploaded to the content repository
Answer: B,D
NEW QUESTION # 47
An automation returned an output called: csvReport.
What filter would be used to check if the automation returned results?
- A. In/In list
- B. Is defined/Exist
- C. Contains/Includes
- D. Equals/Matches
Answer: B
Explanation:
This filter will be used to check if the automation returned results, as it checks to see if the output variable called csvReport is defined and exists. If it is, then the automation returned results.
NEW QUESTION # 48
When creating a new tab in the layout, which section cannot be added?
- A. Retrieve widget chart based on script
- B. Incident team members
- C. Related incidents
- D. War room entries picked by entry query
Answer: C
Explanation:
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.6/Cortex-XSOAR-Administrator-Guide/Customize-Incident-Layouts
NEW QUESTION # 49
Which three statements are true about the Marketplace? (Choose three.)
- A. Publishes content without additional review from the Cortex XSOAR team
- B. Enables users to participate in the community by sharing content
- C. Allows uploading of content in additional languages
- D. Offers granularity in installation through content packs
- E. Allows reverting back to a previous version of a content pack
Answer: B,D,E
NEW QUESTION # 50
Which two statements describe how timers are configured to start and stop automatically in a playbook?
(Choose two.)
- A. From the Timers tab of the playbook task, choose the action for the timer and the timer field to perform the action on
- B. After the playbook has run, calculate the total time taken and set the timer field with this value
- C. Use a field of Number to count the number of seconds elapsed between two tasks
- D. To begin counting time taken, add a task in the playbook with automation startTimer. To end the counting, add a task with automation stopTimer
Answer: A,B
NEW QUESTION # 51
What are inputs and outputs in reference to a Playbook Development Lifecycle? (Choose three.)
- A. Outputs can be derived from the result of a task or command
- B. Outputs are used as incident trigger for playbook
- C. Inputs are the data fields parsed by the Classifier
- D. Inputs are data pieces that are present in the task
- E. Inputs are data pieces that are present in the playbook
Answer: A,C,E
NEW QUESTION # 52
What is the difference between labels and fields?
- A. Labels can be used in queries and fields cannot
- B. Labels are indexed in the database and fields are not
- C. Fields are indexed in the database and labels are not
- D. Fields can be used in playbooks and labels cannot
Answer: A
NEW QUESTION # 53
Which two options will troubleshoot an integration's fetch incidents command? (Choose two.)
- A. Create a one task playbook with a fetch-incident command
- B. execute !<integration_name>-fetch
- C. execute !<integration_instance_name>-fetch
- D. In the instance settings, enable the fetch incidents parameter and wait for one minute
Answer: C,D
NEW QUESTION # 54
An engineer defined a dashboard which allows important metrics to be displayed. The engineer would like to make this dashboard the default dashboard.
How can it be accomplished?
- A. Use the server configuration key: default.dashboards
- B. Right click on the dashboard tab and 'Set as Default'
- C. Save the dashboard as a widget and apply it to all users
- D. Default Dashboard can be defined by 'Role'
Answer: B
NEW QUESTION # 55
Which three scripting languages can an engineer use to write XSOAR automations? (Choose three.)
- A. Powershell
- B. Perl
- C. JavaScript
- D. Go
- E. Python
Answer: A,C,E
NEW QUESTION # 56
What are two primary uses of standard tasks? (Choose two.)
- A. To create an incident or escalate an existing incident
- B. To generate new widgets for a dashboard
- C. To highlight different paths in a playbook
- D. To automate tasks such as parsing a file or enriching indicators
Answer: B,D
NEW QUESTION # 57
Which of the following is a prerequisite to editing out-of-the-box (OOTB) content?
- A. Download the content from the Marketplace.
- B. Register a user account with support.paloaltonetworks.com .
- C. Go to Settings > About >Troubleshooting and set a flag to allow custom content.
- D. Detach the content item you want to edit from the Marketplace.
Answer: C
NEW QUESTION # 58
A large number of incidents were deleted by mistake.
Which two architecture components can be used to recover the lost data? (Choose two.)
- A. Engine
- B. Live backup
- C. Local backup
- D. Distributed database
Answer: A,B
NEW QUESTION # 59
Reliability scores in XSOAR range from A through F. What do A and F stand for?
- A. F - Not reliable, A - Usually Reliable
- B. F - Unreliable, A - Completely Reliable
- C. F - Not usually reliable, A - Fairly Reliable
- D. F - Reliability cannot be judged, A - Completely Reliable
Answer: B
NEW QUESTION # 60
......
Tested Material Used To PCSAE Test Engine: https://exam-labs.prep4sureguide.com/PCSAE-prep4sure-exam-guide.html