Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 11

Management would like to get an incident report automatically following an incident's closure.
How would this be accomplished?

Answer options

• A. Define a task in a playbook to generate an incident report before the closure occurs
• B. Manually create an 'Incident Report'
• C. Configure post-processing using a script
• D. Create an 'Incident Report' from the Reports page

Correct answer: D

Explanation

The correct answer is D because generating an incident report directly from the Reports page allows for automated reporting tied to the incident's closure. Options A and C imply manual intervention or scripting, which do not guarantee automatic generation. Option B is also incorrect as it requires manual effort.