Palo Alto Networks PCSAE Exam - Topic 2 Question 90 Discussion

Actual exam question for Palo Alto Networks's PCSAE exam

Question #: 90
Topic #: 2

[All PCSAE Questions]

What is used to trigger playbooks automatically based on the classification of an incident?

AIndicator type

BIncoming mapper

CIncident types

DIntegration configuration

Show Suggested Answer

Suggested Answer: B, C

by Lavera at Jan 09, 2025, 09:23 AM

Limited Time Offer

25%

Off

Get Premium PCSAE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carmela

3 months ago

Yeah, incident types make the most sense here!

upvoted 0 times

...

Gilberto

3 months ago

Wait, are we sure about this? Sounds off.

upvoted 0 times

...

Ivette

3 months ago

Integration configuration seems more relevant to me.

upvoted 0 times

...

Gladys

4 months ago

I thought it was the indicator type?

upvoted 0 times

...

Lili

4 months ago

It's definitely the incident types that trigger playbooks.

upvoted 0 times

...

Paris

4 months ago

I thought incoming mappers had a role in this, but I also see how incident types could be the answer. It's confusing!

upvoted 0 times

...

Leota

4 months ago

I feel like indicator types were mentioned in relation to playbooks, but I can't remember the exact context.

upvoted 0 times

...

Lea

4 months ago

I remember something about integration configurations being important for automation, but I can't recall if they trigger playbooks directly.

upvoted 0 times

...

Argelia

5 months ago

I think it might be incident types, but I'm not entirely sure. We covered something similar in class.

upvoted 0 times

...

Ludivina

5 months ago

I got this! The answer is Integration configuration. That's how we set up our systems to automatically respond to different incident types.

upvoted 0 times

...

Brice

5 months ago

Okay, let me break this down. Incident types seem the most logical, since that's how we classify incidents. But I'll double-check the other options just to be sure.

upvoted 0 times

...

Denise

5 months ago

I'm a bit confused by the wording of the question. Can someone clarify what "trigger playbooks automatically" means?

upvoted 0 times

...

Jonell

5 months ago

I'm pretty sure the answer is Incident types, since that's what we've been focusing on in class.

upvoted 0 times

...

Glenn

5 months ago

Hmm, this seems like a tricky one. I'll need to think through the different options carefully.

upvoted 0 times

...

Zoila

10 months ago

Haha, I bet the exam writers were just trying to confuse us with all these similar-sounding options. Time to channel my inner Sherlock Holmes and crack this case!

upvoted 0 times

Giuseppe

8 months ago

D) Integration configuration

upvoted 0 times

...

Nan

9 months ago

C) Incident types

upvoted 0 times

...

Brandon

9 months ago

A) Indicator type

upvoted 0 times

...

Craig

10 months ago

I'm going with A) Indicator type. Isn't that what security teams use to detect and respond to threats? Seems like a good fit for this question.

upvoted 0 times

Teddy

9 months ago

D) Integration configuration plays a role in automating the response process as well. It's all about setting up the right triggers.

upvoted 0 times

...

Cory

9 months ago

C) Incident types can also be used to trigger playbooks automatically. It's important to have the right classification for effective response.

upvoted 0 times

...

Glenna

9 months ago

A) Indicator type is correct. It helps trigger playbooks automatically based on the classification of an incident.

upvoted 0 times

...

Rasheeda

10 months ago

Hmm, B) Incoming mapper could also be a valid answer. It's used to map incoming data to the appropriate fields, which could trigger specific playbooks.

upvoted 0 times

Sabrina

9 months ago

B) Incoming mapper makes sense too, it helps map data to the right fields for playbook automation.

upvoted 0 times

...

Lindsey

10 months ago

I agree, A) Indicator type could also play a role in triggering playbooks.

upvoted 0 times

...

Jonell

10 months ago

I believe D) Integration configuration is the key to triggering playbooks automatically.

upvoted 0 times

...

Sage

10 months ago

I think C) Incident types is the correct answer.

upvoted 0 times

...

Jillian

11 months ago

I'm not sure, but I think it could also be D) Integration configuration. It sounds like it could be used to automate the process.

upvoted 0 times

...

Fabiola

11 months ago

D) Integration configuration seems more logical to me. Incident response processes often rely on integrating various tools and systems to automate workflows.

upvoted 0 times

Gilberto

9 months ago

D) Integration configuration is important for setting up the connection between different systems to automate the incident response process.

upvoted 0 times

...

Wilda

10 months ago

C) Incident types are actually used to trigger playbooks automatically based on the classification of an incident.

upvoted 0 times

...

Samuel

11 months ago

I agree with Nadine, Incident types make the most sense for triggering playbooks automatically.

upvoted 0 times

...

Karan

11 months ago

I think the correct answer is C) Incident types. The question specifically mentions triggering playbooks based on incident classification, which aligns with the Incident types option.

upvoted 0 times