PCSAE Question #1: Real Exam Question with Answer & Explanation

The correct answer is A. created:>="7 days" D. status:closed -category:job. https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar-admin/cortex-xsoar- overview/how-to-search-in-cortex-xsoar.html

Question

Which two incident search queries are valid? (Choose two.)

Options

Acreated:>="7 days"
Bowner===admin
Crole is Analyst
Dstatus:closed -category:job

Explanation

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar-admin/cortex-xsoar- overview/how-to-search-in-cortex-xsoar.html

Community Discussion

No community discussion yet for this question.

Full PCSAE Practice