Palo Alto Networks Exam PCSAE Topic 1 Question 64 Discussion

Actual exam question for Palo Alto Networks's PCSAE exam

Question #: 64
Topic #: 1

[All PCSAE Questions]

Which two functions in XSOAR are incident types used for? (Choose two.)

ATo run dedicated playbooks for different event types

BTo classify events ingested from various sources into the relevant types

CTo classify indicators extracted in XSOAR incidents to their respective types

DTo facilitate role based access to XSOAR incidents

Show Suggested Answer

Suggested Answer: B, C

by Pamella at Dec 23, 2023, 03:06 PM

Limited Time Offer

25%

Off

Get Premium PCSAE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mitzie

8 months ago

Ah, I see what you mean now. It's all about understanding the XSOAR terminology and how the different components fit together. I feel much more confident in my understanding of incident types after this discussion. Now, if only there was a way to get the exam questions beforehand...

upvoted 0 times

Twana

8 months ago

A) To run dedicated playbooks for different event types

upvoted 0 times

...

Svetlana

8 months ago

B) To classify events ingested from various sources into the relevant types

upvoted 0 times

...

Gabriele

8 months ago

You guys are on the right track. A and B are definitely the correct answers. Incident types help you run specific playbooks for different event scenarios, and they also allow you to group and classify the incoming data. C and D are more about indicator types and access controls, which are related but distinct concepts.

upvoted 0 times

...

Moon

8 months ago

I agree, the wording can be a bit tricky. I think A and B are the right answers, but I'm not 100% certain. Incident types are used to categorize the overall incident, while indicator types are more for the individual components within an incident, right?

upvoted 0 times

...

Leonora

8 months ago

This question seems straightforward, but I'm a bit unsure about the differences between incident types and indicator types. I'm leaning towards A and B, but I want to make sure I understand the nuances.

upvoted 0 times

...