PCSAE Exam Questions

You can customize most aspects of the incident layout, including which three of the following? (Choose three.)

Who is permitted to create and submit content to the Marketplace?

Reliability scores in XSOAR range from A through F. What do A and F stand for?

Newly created subplaybooks do not have any inputs, or outputs. What is necessary to make them functional? (Choose two.)

A Cortex XSOAR Administrator is tasked with building a button for an analyst in order for the analyst to be assigned to the incident as an owner. What is the process?

Which field type should be used to hold more than 60,000 characters of unformatted text?

In order to automatically run a playbook on the indicators fetched by an integration, what would an XSOAR Administrator setup?

Which two functions in XSOAR are incident types used for? (Choose two.)

When creating an incident layout section, it is best to place long field values within which of the following?

The default expiration method for non-feed indicators is either to never expire or to expire after a specific period of time. How frequently does XSOAR check tor newly expired indi...

An Engineer wants to filter a csvList value according to a dynamic value saved under the test context key. Which three values would save the test context key? (Choose three.)

Which content type can be managed using remote repositories?

Which tag is mandatory for an Indicator reputation Script while configuring an indicator type?

A Cortex XSOAR engineer is building an automation in Python and wants to return the error back in the war room. How can this be achieved?

In which two Cortex XSOAR functions are incident types used? (Choose two.)

When is the post-processing script executed in XSOAR?

An Engineer wants to filter a csvList value according to a dynamic value saved under the context key named "test". Refer to the image below. Which two values would save the "test"...

Which action would enable notifications of incident fetch fails?

Which Cortex XSOAR feature assigns newly ingested event attributes to incident fields?

Which task type will verify that an integration was enabled?

What is a feature of the outgoing mapper in Cortex XSOAR?

What are recommended for placing a long text incident field value in an incident layout?

What are three loop types in a sub-playbook? (Choose three.)