PCSAE Exam Dumps - Palo Alto Networks Certified Security Automation Engineer

Define a task in a playbook to generate an incident report before the closure occurs

Manually create an ‘Incident Report’

Configure post-processing using a script

Create an ‘Incident Report’ from the Reports page

F - Reliability cannot be judged, A - Completely Reliable

F - Not reliable, A - Usually Reliable

F - Not usually reliable, A - Fairly Reliable

F - Unreliable, A - Completely Reliable

Fields can be used in playbooks and labels cannot

Fields are indexed in the database and labels are not

Labels can be used in queries and fields cannot

Labels are indexed in the database and fields are not

Use a field trigger script

Use a field display script

Create a job that queries for incident severity changes

Change the SLA manually every time the severity changes

${incident.sourceip}

${incident.Source_IP}

${incident.srcip}

${incident.Source IP}

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with no argument

Edit the incident layout to add a new button that calls the AssignToMeButton automation with argument assignBy={me}

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument owner={me}

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument assignBy=current

Standard (Manual)

Conditional

Section header

Standard (Automated)