Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 80

What is the default configuration for indicator auto-extraction when incidents are created?

Answer options

• A. Inline
• B. Inband
• C. None
• D. Out of band

Correct answer: A

Explanation

The correct answer is A, Inline, which means that indicator extraction occurs as incidents are created. Options B, C, and D do not represent the default behavior for indicator extraction during incident creation, as they refer to different methods of handling data or indicate that no extraction is performed.