Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 83

An engineer would like to add a custom field to the New Job form for a job triggered from a threat intel feed.
How would the engineer implement this?

Answer options

• A. The new job form changes based on the threat intel feed integration configuration
• B. The new job form can be edited from the Indicator Feed incident type editor
• C. The new job form for a threat intel feed job cannot be edited
• D. The new job form can be edited from the threat intel feeds integration settings

Correct answer: B

Explanation

The correct answer is B because the Indicator Feed incident type editor allows for modifications to the New Job form, including adding custom fields. Option A is incorrect as it implies automatic changes based on integration, which does not facilitate manual edits. Option C is wrong since the form can be edited, and option D is incorrect because the appropriate editing location is the incident type editor, not the integration settings.