Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 124

Which action would enable notifications of incident fetch fails?

Answer options

• A. Create a new integration that monitors the incident fetch and sends an email if the fetch fails.
• B. Schedule a job that runs and monitors incidents in Cortex XSOAR that will send an email if there are no new incidents.
• C. Add a server config to notify when incident fetch fails.
• D. Create a custom playbook that sends an email each time the fetch fails.

Correct answer: C

Explanation

The correct answer, C, is accurate because adding a server configuration specifically allows for notifications on incident fetch failures. Options A and D involve additional setups that may not directly address the requirement for server notifications, while B focuses on monitoring for the absence of incidents rather than fetch failures.