Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 130

After executing the DeleteContext automation with all=yes argument, how would the context data of an incident present?

Answer options

• A. All the data, including the incident key will be deleted, and the context data will be completely empty.
• B. No difference, the automation cannot be executed manually.
• C. All context data, including custom incident fields will be deleted, system incident fields will remain.
• D. All context data, except the incident key will be deleted.

Correct answer: D

Explanation

The correct answer is D because executing the DeleteContext automation with all=yes deletes all context data except for the incident key. Option A is incorrect since the incident key remains. Option B is incorrect because the automation can be executed manually. Option C is wrong as it states system fields will remain, which is not applicable in this case.