Palo Alto Networks Exam PCSAE Topic 2 Question 90 Discussion

Actual exam question for Palo Alto Networks's PCSAE exam

Question #: 90
Topic #: 2

[All PCSAE Questions]

Which two functions in XSOAR are incident types used for? (Choose two.)

ATo run dedicated playbooks for different event types

BTo classify events ingested from various sources into the relevant types

CTo classify indicators extracted in XSOAR incidents to their respective types

DTo facilitate role based access to XSOAR incidents

Show Suggested Answer

Suggested Answer: B, C

by Lavera at Jan 09, 2025, 09:23 AM

Limited Time Offer

25%

Off

Get Premium PCSAE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jolene

2 days ago

Haha, D is a good one! 'To facilitate role based access' - as if security analysts need more bureaucracy, right? I'll stick with B and C though.

upvoted 0 times

...

Mica

5 days ago

I'm going with B and C as well. Incident types are all about organizing the data we ingest, not managing user permissions or running specific playbooks.

upvoted 0 times

...

Candra

6 days ago

I agree, it helps in categorizing events from different sources.

upvoted 0 times

...

Alexis

10 days ago

B and C seem like the obvious choices here. I'm pretty sure incident types are used to classify events and indicators, not for playbook assignment or access control.

upvoted 0 times

...

Lamonica

11 days ago

I think incident types in XSOAR are used for classifying events.

upvoted 0 times

...