PCSAE Online Practice Questions and Answers

During the regular maintenance of XSOAR a customer noticed that there was an update available for the Active Directory content pack (current version 1.4.6) and updated the content pack to the latest version (version 1.4.11). However, after the update the customer noticed that the Active Directory Query integration is not working properly and asked you to resolve the issue.

Which of the following set of steps can help to resolve the issue?

A. Navigate to Settings View the configured integrations and select Active Directory Authentication Delete all integration instances and add all integration instances again

B. Navigate to Marketplace View the installed content pack and select Active Directory content pack Select version 1.4.6 and click on "Revert to this version"

C. Navigate to Settings View the configured integrations and select Active Directory Query Delete all integration instances and add all integration instances again

D. Navigate to Marketplace View the installed content pack and select Active Directory content pack Click on uninstall content pack Navigate to Marketplace browser and reinstall the Active Directory content pack

Which two methods are used to add new content to the XSOAR Content Repository? (Choose two.)

A. Create content and add it to the standard content by contributing through the Marketplace

B. Use the XSOAR GitHub Contribution Guide to add the contribution to the standard content

C. Create a support ticket with the custom content for review by the support team

D. Any custom content will be automatically uploaded to the content repository

How would context data be filtered to receive only malicious indicator values with DBotScore?

A. Get DBotScore.value where DBotScore.Score (Larger or equals) 4

B. Get DBotScore.value where DBotScore.Score (equals (int)) 3

C. Get DBotScore where DBotScore.Score (Larger than) 1

D. Get DBotScore where DBotScore.Score (Larger or equals) 2

Which three authentication methods are supported when logging into XSOAR? (Choose three.)

A. OTP token

B. User name and password

C. SAML

D. Active Directory authentication

E. RADIUS

Which three types of information are displayed on the incident Quick View? (Choose three.)

A. Indicators and relationships

B. Timeline information

C. Evidence Board

D. Context data

E. Incident severity

You can customize most aspects of the incident layout, including which three of the following? (Choose three.)

A. Which users have permissions to view the tabs

B. Which roles have permissions to view the tabs

C. Which dashboard settings are applied

D. The information and how is it displayed

E. Which tabs appear and in which order

Which three scripting languages can an engineer use to write XSOAR automations? (Choose three.)

A. Python

B. Perl

C. Go

D. JavaScript

E. Powershell

What does the outgoing mapper support?

A. Mirroring

B. Classification

C. Dynamic fields

D. Pre-processing

Which two statements accurately describe layouts? (Choose two.)

A. Layouts override classification and mapping

B. New tabs can be added to the incident layout

C. Layouts can display incident information and custom fields

D. Layouts add or remove custom fields from an incident type

Which two components have their own context data? (Choose two.)

A. Sub-playbook

B. Task

C. Field

D. Incident