Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 139

Which method accesses a field called `˜User Mail' in a playbook?

Answer options

• A. ${incident.usermail}
• B. ${incident.User Mail}
• C. ${incident.UserMail}
• D. ${usermail}

Correct answer: A

Explanation

The correct answer is A, ${incident.usermail}, as it follows the correct syntax for accessing a field in a playbook, using the incident object and the exact field name in lowercase. Option B is incorrect due to the space in 'User Mail', which is not valid in this context. Option C uses 'UserMail' which does not match the original field name, and option D omits the 'incident' object, making it invalid.