PCSAE Online Practice Questions and Answers

What are two primary uses of standard tasks? (Choose two.)

A. To highlight different paths in a playbook

B. To generate new widgets for a dashboard

C. To create an incident or escalate an existing incident

D. To automate tasks such as parsing a file or enriching indicators

A SOC analyst needs to retrieve the list of all open phishing incidents in the last 30 days. What is the correct query to use?

A. -status:closed -category:job type:Phishing created:>="30 days ago"

B. status:closed -category:job and type:Phishing created:>="30 days ago"

C. -status:closed -category:job and type:Phishing created:<="30 days ago"

D. -status:closed -category:job type:Phishing created:="30 days ago"

Which three support types are included in the Marketplace Content Packs? (Choose three.)

A. Customer supported

B. Contex XSOAR supported

C. Community supported

D. Partner supported

E. Prisma Cloud supported

When uploading content, which two options could the upload include? (Choose two.)

A. Indicators

B. Incidents

C. Reports

D. Fields

What can be added to offload integration instance processing from the main server?

A. Database node

B. Application server

C. Engine

D. Development server

What are the three ways to add/mark entries as evidence inside the Evidence Board? (Choose three.)

A. Manually directly from the War Room with the Actions drop-down

B. From the Notes section (mark as entry icon)

C. Manually from the playbook task (mark as entry icon)

D. Automatically from playbook tasks when the option is selected on the Advanced tab

E. By running the command !MarkAsEvidence

What is the correct definition regarding integration parameters and command arguments?

A. Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command.

B. Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are shared with other commands and must be present for each command.

C. Parameters are local variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command.

D. Parameters are global variables which means that every command can use these configurable options in order to run. Arguments are specific to only one command.

What is the default landing page for a new user in XSOAR?

A. Dashboards

B. Threat Intel

C. Settings

D. Marketplace

An organization has recently acquired another company as its subsidiary. The subsidiary has its infrastructure on AWS cloud as illustrated in the image below: The organization wants to use the mail server location on the subsidiary's cloud to send emails. Without acquiring additional licenses, which XSOAR component can fulfill the requirement?

A. XSOAR D2 Agents, to send the required emails.

B. An XSOAR engine that is downloaded from the XSOAR server and installed within the subsidiary.

C. Another XSOAR server that uses the same license as their primary XSOAR server.

D. A Linux server connected with an XSOAR server using SSH integration. Commands can be run remotely to access the mail server.

DRAG DROP

Match the corresponding action with the appropriate playbook tasks.

Select and Place: