Exam PCSAE topic 1 question 70 discussion

Actual exam question from Palo Alto Networks's PCSAE

Question #: 70
Topic #: 1

An engineer would like to add a custom field to the New Job form for a job triggered from a threat intel feed.
How would the engineer implement this?

A. The new job form changes based on the threat intel feed integration configuration
B. The new job form can be edited from the Indicator Feed incident type editor
C. The new job form for a threat intel feed job cannot be edited
D. The new job form can be edited from the threat intel feeds integration settings

Show Suggested Answer

Suggested Answer: B 🗳️
Reference:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-threat-intel-management-guide/manage-indicators/understand-indicators/ create-a-feed-based-job.html

by franko_72 at July 18, 2023, 11:55 a.m.

Comments

Submit Cancel

piipo

4 months ago

Selected Answer: B

B is correct

upvoted 1 times

...

news088

9 months, 1 week ago

B is correct: You can customize the new job form by editing the Indicator Feed incident type. https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.5/Cortex-XSOAR-Threat-Intel-Management-Guide/Feed-Integrations

upvoted 3 times

...

nitishpop8895

10 months, 4 weeks ago

b is correct

upvoted 2 times

...

franko_72

1 year ago

I think the answer is actually C. From the link below "The following table lists the fields available when defining a job, and their descriptions" There is no option to create a custom field. https://xsoar.pan.dev/docs/incidents/incident-jobs