PCSAE Online Practice Questions and Answers

Given an incident with three files, how could the name of the second file be referenced?

A. ${Files.[2].Name}

B. ${Files.Name.[2]}

C. ${File.[1].Name}

D. ${File.Name.[1]}

What does Script helper contain?

A. Available commands

B. Permission settings

C. Automation version history

D. Automation timeout configuration

For troubleshooting, after a log bundle is created, where do the logs appear on the XCSOAR server?

A. /var/lib/demisto

B. /tmp/log/demisto

C. /usr/local/demisto

D. /var/log/demisto

What is the correct expression to use when filtering only PDF files?

A. Use File.Extension that does not equal (string comparison) PDF

B. Use File.Name contains PDF

C. Use File.Extension contains (general) PDF

D. Use File.Extension equals (string comparison) PDF

Which two options will troubleshoot an integration's fetch incidents command? (Choose two.)

A. In the instance settings, enable the fetch incidents parameter and wait for one minute

B. Create a one task playbook with a fetch-incident command

C. execute !-fetch

D. execute !-fetch

To avoid exceeding API quotas for third-party services, indicators are only updated after the indicator cache expiration period. What is the default cache expiration period for indicators in XSOAR (minutes/days)?

A. 10,080 minutes (7 days)

B. 20,160 minutes (14 days)

C. 21,600 minutes (15 days)

D. 4,320 minutes (3 days)

What happens when an integration is deprecated?

A. The integration commands in a playbook can no longer be used

B. The integration commands can be used, but it is recommended to update to the latest content pack

C. The configuration settings will be lost and the integration will no longer function

D. The integration commands in a playbook can be used, but it will fail at runtime

An administrator wants to run an automation in the War Room to set the incident field "Description" to "Confirmed Phishing". Which command should they enter in the War Room CLI?

A. !incidentSet description="Confirmed Phishing"

B. /incidentSet description=Confirmed Phishing

C. !setIncident description="Confirmed Phishing"

D. /setIncident description=Confirmed Phishing

Which content type cannot be managed using remote repositories?

A. Lists

B. Jobs

C. Pre-processing rules

D. Exclusion List

Which field type should be used to hold more than 60,000 characters of unformatted text?

A. Short Text

B. HTML

C. Long Text

D. Markdown