Palo Alto Networks PCSAE認証された練習解答、必ずあなたを試験合格させる！[2023]
有効な合格方法Palo Alto Certifications and AccreditationsのPCSAE試験問題集
Palo Alto Networks PCSAE（Palo Alto Networks認定セキュリティ自動化エンジニア）認定試験は、Palo Alto Networksテクノロジーを使用してセキュリティタスクを自動化するセキュリティプロフェッショナルの知識とスキルを確認するために設計されています。企業が効率を改善し、リスクを減らすために自動化にますます頼るようになるにつれて、熟練したセキュリティ自動化エンジニアの需要が高まっています。この認定試験は、この成長分野で自分の専門知識を証明したい個人にとって、貴重な資格です。
質問 # 39
You can customize most aspects of the incident layout, including which three of the following? (Choose three.)
- A. Which dashboard settings are applied
- B. Which users have permissions to view the tabs
- C. Which tabs appear and in which order
- D. Which roles have permissions to view the tabs
- E. The information and how is it displayed
正解：A、C、E
質問 # 40
Which two features does XSOAR offer to help recover from a server failure? (Choose two.)
- A. Distributed database
- B. Backup data to XSOAR engines
- C. Local backup
- D. Live backup (disaster recovery)
正解：B、D
質問 # 41
Which two statements describe how timers are configured to start and stop automatically in a playbook?
(Choose two.)
- A. After the playbook has run, calculate the total time taken and set the timer field with this value
- B. To begin counting time taken, add a task in the playbook with automation startTimer. To end the counting, add a task with automation stopTimer
- C. From the Timers tab of the playbook task, choose the action for the timer and the timer field to perform the action on
- D. Use a field of Number to count the number of seconds elapsed between two tasks
正解：A、C
質問 # 42
Which configuration is a valid distributed database (DB) implementation?
- A. 2 application servers, 1 main DB, 1 node server
- B. 1 main DB, 1 application server, 3 node servers
- C. 2 main DBs, 1 application server, 2 node servers
- D. 1 application server, 2 main DBs, 1 node server
正解：A
質問 # 43
Which two options may be added when a content pack is being installed? (Choose two.)
- A. Indicator layouts
- B. Lists
- C. Roles
- D. Other content packs
正解：B、C
質問 # 44
Which configuration is a valid distributed database (DB) implementation?
- A. 2 application servers, 1 main DB, 1 node server
- B. 1 main DB, 1 application server, 3 node servers
- C. 2 main DBs, 1 application server, 2 node servers
- D. 1 application server, 2 main DBs, 1 node server
正解：B
質問 # 45
Reliability scores in XSOAR range from A through F. What do A and F stand for?
- A. F - Not usually reliable, A - Fairly Reliable
- B. F - Reliability cannot be judged, A - Completely Reliable
- C. F - Unreliable, A - Completely Reliable
- D. F - Not reliable, A - Usually Reliable
正解：C
質問 # 46
An administrator wants to send an email via the Mail Sender integration. Which of the following out of the box methods would be used for that?
- A. XSOAR D2 agent
- B. external integration command
- C. common automation script
- D. XSOAR shared agent
正解：B
質問 # 47
Which three scripting languages can an engineer use to write XSOAR automations? (Choose three.)
- A. Go
- B. Powershell
- C. Perl
- D. JavaScript
- E. Python
正解：B、D、E
質問 # 48
Match the appropriate action to the layout type.
正解：
解説：
質問 # 49
What happens when an integration is deprecated?
- A. The integration commands can be used, but it is recommended to update to the latest content pack
- B. The integration commands in a playbook can be used, but it will fail at runtime
- C. The integration commands in a playbook can no longer be used
- D. The configuration settings will be lost and the integration will no longer function
正解：D
質問 # 50
What is the most effective way to correlate multiple raw events coming from a SIEM and link them together?
- A. Configure a pre-process rule to link related events as they are ingested
- B. Ingest all raw events, run a custom script to find the relationship between them and proceed to link them together
- C. Manually go through the incidents created by the raw events and link related incidents
- D. Process all alerts by running the respective playbook and link related incidents during post-processing
正解：D
質問 # 51
Which three statements are true about the Marketplace? (Choose three.)
- A. Offers granularity in installation through content packs
- B. Publishes content without additional review from the Cortex XSOAR team
- C. Allows uploading of content in additional languages
- D. Allows reverting back to a previous version of a content pack
- E. Enables users to participate in the community by sharing content
正解：B、C、E
質問 # 52
Which two capabilities do Automation script settings include? (Choose two.)
- A. Define 'outputs'
- B. Define 'parameters'
- C. Correlate to incident types
- D. Set password protection
正解：C、D
質問 # 53
An engineer notices that playbooks only start once the user clicks the 'investigate' button and he/she would like the playbook to start automatically.
How can this be implemented?
- A. Add the !startinvestigation automation to the beginning of the playbook
- B. Add the playbook to the integration's settings
- C. Select 'Run playbook automatically' from the integration settings
- D. Select 'Run playbook automatically' from the incident type settings
正解：D
質問 # 54
An engineer is developing a playbook that will be run multiple times for testing purposes. What is the recommended first task to be used in the playbook?
- A. DeleteContext
- B. PrintContext
- C. SetContext
- D. GenerateTest
正解：A
質問 # 55
An XSOAR Engineer has developed a playbook and would like to contribute it to the XSOAR Marketplace to share with other users.
Which two options are available to the Engineer for contributing to the Marketplace? (Choose two.)
- A. Contribute through the XSOAR UI
- B. Send an email to [email protected]
- C. Create a pull request directly on Github
- D. Open a ticket with the XSOAR support team
正解：A、C
質問 # 56
Multiple company assets were reported by vulnerability scanners as being vulnerable to CVE-2017-11882.
This vulnerability affects applications installed on workstations. The SOC team needs to take action and apply the new vulnerability patch that was just released. The team must first create a cause for each of the identified assets in ServiceNow IT Service Management (ITSM), in order to notify the IT department. Next, the team creates a task in the main playbook, which extracts the list of assets from the scanner report.
After the list of assets are created, what are the two solutions that the SOC team could take so that a case could be created and a patch installed? (Choose two.)
- A. Set a key for storing the iteration number and create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Exit condition: iterator equal to count of the number of item in the list) and perform the following tasks:
-Increase the iterator value by one each time
-Active Directory User Enrichment based on the computerName
-Create the ServiceNow Record by adding the enrichment information
-Mark the ticket severity as Urgent - B. Create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Condition: AreValuesEqual - Exit on yes - left:1, right 1) and perform the following tasks:
-Active Directory User Enrichment based on the computerName
-Create the ServiceNow Record by adding the enrichment information
-Mark the ticket severity as Urgent - C. Set a key for storing the iteration number and create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Exit condition: iterator contains the count of the number of items in the list) and perform the following tasks:
-Active Directory User Enrichment based on the computerName
-Create the ServiceNow Record by adding the enrichment information
-Mark the ticket severity as Urgent - D. Create a sub-playbook with a single input containing the computer names that will loop 'For Each Input' and perform the following tasks:
-Active Directory User Enrichment based on the computerName
-Create the ServiceNow Record by adding the enrichment information
-Mark the ticket severity as Urgent
正解：A、D
質問 # 57
Which of the following are valid methods to contribute custom content? (Choose three.)
- A. Using the content submission tool on live.paloaltonetworks.com
- B. Private GitHub repository submission for premium content
- C. Using the marketplace interface to upload the content
- D. Submit content directly through feature requests
- E. A Github pull request on the public XSOAR Content Repository
正解：A、C、E
質問 # 58
An engineer would like to add a custom field to the New Job form for a job triggered from a threat intel feed. How would the engineer implement this?
- A. The new job form can be edited from the threat intel feeds integration settings
- B. The new job form for a threat intel feed job cannot be edited
- C. The new job form can be edited from the Indicator Feed incident type editor
- D. The new job form changes based on the threat intel feed integration configuration
正解：C
質問 # 59
What is a primary use case of data collection tasks?
- A. To automate tasks such as parsing a file or enriching indicators
- B. To allow multi-question surveys without authentication restrictions
- C. To generate new widgets for a dashboard
- D. To determine different paths in a playbook
正解：B
質問 # 60
Which two reasons would lead an engineer to create a custom widget? (Choose two.)
- A. To visualize a custom query
- B. To visualize server configuration keys
- C. To visualize context data
- D. To visualize complex incident data calculations
- E. To visualize XSOAR list data
正解：A、C
質問 # 61
Newly created subplaybooks do not have any inputs, or outputs. What is necessary to make them functional? (Choose two.)
- A. Open the subplaybook and add inputs or outputs in the Playbook triggered task.
- B. Define input key in the subplaybook task. Map context values to pull from parent playbook.
- C. Map inputs and outputs to the parent playbook and the subplaybook will use the same values.
- D. The output of the previous task automatically becomes the input of the subplaybook.
正解：A、B
質問 # 62
......
Palo Alto Networks PCSAE事前試験練習テストはPassTest：https://www.passtest.jp/Palo-Alto-Networks/PCSAE-shiken.html
PCSAE練習テスト問題、解答、解釈：https://drive.google.com/open?id=1Vlkw2kfNH7TAd-AsV_l6Y1WaYHqqF0hz