Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 91

A playbook task generates a report as HTML in the context data.

An engineer creates a custom indicator field of type "HTML" and adds the field to a section in a custom indicator layout. How can the engineer populate the HTML field in the indicator layout?

Answer options

• A. Populate the custom indicator field with the built-in !SetIndicator command.
• B. Add HTML to a list using !setList and use it as an HTML template to populate the custom indicator field.
• C. Create a custom Indicator Mapper and populate the custom indicator field.
• D. Use the Mapping option in the playbook task that generates the HTML report to populate the custom indicator field.

Correct answer: D

Explanation

The correct answer is D because the Mapping option in the playbook task can directly link the generated HTML content to the custom indicator field. Options A and B are not applicable as they do not specifically relate to the context of populating an HTML field from a report, and option C involves creating a mapper, which is not necessary when the mapping can be done directly in the task.