Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 106

When is the post-processing script executed in XSOAR?

Answer options

• A. Just after the incident is created
• B. Just after the pre-processing is executed
• C. Just after the playbook is executed
• D. Just after the Close Incident button is clicked

Correct answer: D

Explanation

The post-processing script is executed after the Close Incident button is clicked, as this is the point where final actions or cleanup tasks are needed. The other options refer to stages that occur before the incident is formally closed, making them incorrect in relation to when the post-processing script runs.