Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 38

A large number of incidents were deleted by mistake.
Which two architecture components can be used to recover the lost data? (Choose two.)

Answer options

• A. Live backup
• B. Engine
• C. Distributed database
• D. Local backup

Correct answer: A, D

Explanation

The correct answers are A and D because live backups and local backups maintain copies of data that can be restored after accidental deletion. The engine does not store data backups, and a distributed database may not have the specific recovery capabilities needed for deleted incidents.