PCSAE — Free Practice Questions
10 free sample questions from a bank of 220, with the correct answers and explanations. No signup required — start practising right now.
1Which two advanced attributes can be applied to incident fields when editing? (Choose two.)
- Set a field trigger script
- Associate to an incident type
- Change field type
- Change field name
Answer: A, B
2Which two causes may be occurring if an integration test is working, but the integration is not fetching incidents? (Choose two.)
- The 'Fetches Incidents' option may not have been enabled
- There are no new events from the external service
- The first fetch should be manually triggered to start the fetching process
- It can take up to 1-hour before incidents are initially fetched
Answer: A, C
3Which of the following is a feature of XSOAR automations?
- can run on multiple docker containers
- can be set to run on a scheduled basis in the automation settings
- can be password protected
- can be written in C++
Answer: C
4When is the post-processing script executed in XSOAR?
- Just after the incident is created
- Just after the pre-processing is executed
- Just after the playbook is executed
- Just after the Close Incident button is clicked
Answer: D
5Which option is available in XSOAR to create the body of a Threat Intel Report?
- Markdown
- Grid Fields
- DOC format
- Javascript
Answer: A
6Given the following context data, what would be the expected output of the expression?
- 1E56733826E5035233A097FCEA2046AF96EC616C
- E6EF5142E2553C1E442A0FFAC07636EAC61E6EDD
- 8D193FA162A305E4859BA8C45F5121F7265E3ABB
- e6ef5142e2553c1e442a0ffac07636eac61e6edd
Answer: B
7Where are incident layouts customized?
- Settings > Object Setup > Incidents > Layouts
- Settings > Integrations > Instance configuration
- Settings > Object Setup > Indicators > Layouts
- Settings > Advanced > Incident Layouts
Answer: A
8How can Cortex XSOAR administrators prevent junior analysts from viewing a senior analyst dashboard?
- Share the dashboard in Read and Edit mode for senior analysts.
- Share the dashboard in Read & Edit mode for senior analysts and Read Only for juniors analysts.
- Share the dashboard in Read and Write mode for senior analysts.
- Share the dashboard in Read Only mode for junior analysts and senior analysts.
Answer: B
9Which content type cannot be managed using remote repositories?
- Lists
- Jobs
- Pre-processing rules
- Exclusion List
Answer: B
10Which task type would be used to verify/check that an integration was enabled?
- Standard task
- Conditional task
- Section Header task
- Data Collection task
Answer: D
Want the full bank of 220 questions for PCSAE? See all practice exams.