exam questions

Exam PCSAE All Questions

View all questions & answers for the PCSAE exam

Exam PCSAE topic 1 question 111 discussion

Actual exam question from Palo Alto Networks's PCSAE
Question #: 111
Topic #: 1
[All PCSAE Questions]

After executing the DeleteContext automation with all=yes argument, how would the context data of an incident present?

  • A. All the data, including the incident key will be deleted, and the context data will be completely empty.
  • B. No difference, the automation cannot be executed manually.
  • C. All context data, including custom incident fields will be deleted, system incident fields will remain.
  • D. All context data, except the incident key will be deleted.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
bigg_q
3 weeks, 6 days ago
Selected Answer: D
I use delete context =all at the start of most of my playbooks for troubleshooting. Answer is D.
upvoted 1 times
...
Jai_ke
4 months, 2 weeks ago
Selected Answer: A
In reality, when you run DeleteContext with all=yes, it deletes all context data associated with the incident, including the incident key. This leaves the context completely empty, meaning there's nothing left in the context, not even the incident key. A is the correct answer
upvoted 1 times
...
gabriel.alarcon0730
5 months ago
Selected Answer: D
The incident key prevails
upvoted 2 times
...
piipo
9 months, 2 weeks ago
Selected Answer: A
https://xsoar.pan.dev/docs/reference/scripts/delete-context
upvoted 1 times
ZDMA99
8 months ago
Wrong, the incident key is preserved. It's D.
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago