Palo Alto Networks Exam PCSAE Topic 1 Question 64 Discussion

Actual exam question for Palo Alto Networks's Palo Alto Networks Certified Security Automation Engineer exam

Question #: 64
Topic #: 1

[All Palo Alto Networks Certified Security Automation Engineer Questions]

Which two functions in XSOAR are incident types used for? (Choose two.)

ATo run dedicated playbooks for different event types

BTo classify events ingested from various sources into the relevant types

CTo classify indicators extracted in XSOAR incidents to their respective types

DTo facilitate role based access to XSOAR incidents

Show Suggested Answer

Suggested Answer: B, C

by Pamella at Dec 23, 2023, 03:06 PM

Limited Time Offer

25%

Off

Get Premium PCSAE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mitzie

24 days ago

Ah, I see what you mean now. It's all about understanding the XSOAR terminology and how the different components fit together. I feel much more confident in my understanding of incident types after this discussion. Now, if only there was a way to get the exam questions beforehand...

upvoted 0 times

Twana

11 days ago

A) To run dedicated playbooks for different event types

upvoted 0 times

...

Svetlana

12 days ago

B) To classify events ingested from various sources into the relevant types

upvoted 0 times

...

Gabriele

25 days ago

You guys are on the right track. A and B are definitely the correct answers. Incident types help you run specific playbooks for different event scenarios, and they also allow you to group and classify the incoming data. C and D are more about indicator types and access controls, which are related but distinct concepts.

upvoted 0 times

...

Moon

26 days ago

I agree, the wording can be a bit tricky. I think A and B are the right answers, but I'm not 100% certain. Incident types are used to categorize the overall incident, while indicator types are more for the individual components within an incident, right?

upvoted 0 times

...

Leonora

27 days ago

This question seems straightforward, but I'm a bit unsure about the differences between incident types and indicator types. I'm leaning towards A and B, but I want to make sure I understand the nuances.

upvoted 0 times

...