Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 59

An administrator has noticed that an incident fetch has failed, causing several internal workflows to be backed up. The administrator would like to receive notifications the next time the incident fetch fails.

How can they achieve this?

Answer options

• A. Create a custom playbook that sends an email each time the fetch fails.
• B. Create a new integration that monitors the incident fetch and sends an email if the fetch fails.
• C. Schedule a job that runs and monitors incidents in XSOAR that will send an email if there are no new incidents.
• D. Add a server config to notify when incident fetch fails.

Correct answer: D

Explanation

The correct answer is D because adding a server configuration specifically allows for notifications to be sent when the incident fetch fails. Options A and B involve creating additional resources that may not be necessary for this requirement, while option C focuses on monitoring for new incidents rather than directly addressing the fetch failure.