Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 65

An administrator wants to run an automation in the War Room to set the incident field "Description" to "Confirmed Phishing". Which command should they enter in the War Room CLI?

Answer options

• A. !incidentSet description="Confirmed Phishing"
• B. /incidentSet description=Confirmed Phishing
• C. !setIncident description="Confirmed Phishing"
• D. /setIncident description=Confirmed Phishing

Correct answer: C

Explanation

The correct command is !setIncident description="Confirmed Phishing" because it follows the required syntax for setting incident fields in the War Room CLI. The other options either use incorrect syntax or incorrect command names, which would not execute successfully.