PCSAE Practice Test

Review 171 PCSAE practice questions with answer explanations and community insights.

Question 1

Which two advanced attributes can be applied to incident fields when editing? (Choose two.)

  1. Set a field trigger script
  2. Associate to an incident type
  3. Change field type
  4. Change field name

Question 2

Given an incident with three files, how could the name of the second file be referenced?

  1. ${Files.[2].Name}
  2. ${Files.Name.[2]}
  3. ${File.[1].Name}
  4. ${File.Name.[1]}

Question 3

Which component can be part of a load balancing group?

  1. Distributed database
  2. D2 agent
  3. Engine
  4. Load balancing server

Question 4

Which method accesses a field called `˜User Mail' in a playbook?

  1. ${incident.usermail}
  2. ${incident.User Mail}
  3. ${incident.UserMail}
  4. ${usermail}

Question 5

A SOC manager built a dashboard and would like to share the dashboard with other team members. How would the SOC manager create a dashboard that meets this requirement?

  1. Manually share the dashboard through user emails
  2. Dashboard is shared to all XSOAR users
  3. Propagate the dashboard based on SAML authentication
  4. Dashboard is shared to all XSOAR users in a selected role