Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 67

When developing the playbook, which of the following can be used by a XSOAR Administrator?

Answer options

• A. The Debugger panel to test data with one of last five incidents. This will affect the incident’s original incident data.
• B. Context data from existing incidents by exporting the YAML data from incidents and importing it to playbook editor.
• C. Debugger panel and XML data from a similar incident with New Mock Incident. This will not affect the incidents original incident data.
• D. The Debugger panel to test data with one of last fifty incidents. This will not affect the incident’s original incident data.

Correct answer: D

Explanation

The correct answer is D because using the Debugger panel allows testing with a larger set of incidents without modifying their original data. Option A is incorrect as it affects the incident's original data, while option B discusses a different method that does not involve the Debugger panel. Option C mentions XML data but incorrectly states that it won't affect original incident data, which is not relevant to the playbook development process in this context.