Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 41

Which two causes may be occurring if an integration test is working, but the integration is not fetching incidents? (Choose two.)

Answer options

• A. The 'Fetches Incidents' option may not have been enabled
• B. There are no new events from the external service
• C. The first fetch should be manually triggered to start the fetching process
• D. It can take up to 1-hour before incidents are initially fetched

Correct answer: A, B

Explanation

Option A is correct because if the 'Fetches Incidents' feature isn't enabled, incidents won't be fetched despite a successful test. Option B is also correct since the absence of new events from the external service would prevent any incidents from being retrieved. Options C and D are incorrect because they don't address fundamental issues with the integration's ability to fetch incidents.