Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 64

A Cortex XSOAR Administrator is tasked with building a button for an analyst in order for the analyst to be assigned to the incident as an owner. What is the process?

Answer options

• A. Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with no argument
• B. Edit the incident layout to add a new button that calls the AssignToMeButton automation with argument assignBy={me}
• C. Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument owner={me}
• D. Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument assignBy=current

Correct answer: D

Explanation

The correct answer is D, as it appropriately uses the AssignAnalystToIncident automation with the assignBy=current argument to assign the analyst as the owner of the incident. Options A and C do not use the correct argument, and option B employs a different automation that does not fulfill the requirement of assigning the analyst as the owner.