Palo Alto Networks Certified Security Automation Engineer (PCSAE) — Question 92

What are the three ways to add/mark entries as evidence inside the Evidence Board? (Choose three.)

Answer options

• A. Manually directly from the War Room with the Actions drop-down
• B. From the Notes section (mark as entry icon)
• C. Manually from the playbook task (mark as entry icon)
• D. Automatically from playbook tasks when the option is selected on the Advanced tab
• E. By running the command !MarkAsEvidence

Correct answer: A, B, D

Explanation

The correct methods for marking entries as evidence are A, B, and D. Option A allows for manual marking through the War Room interface, while B uses the Notes section's icon. Option D enables automatic marking through specific playbook tasks. Option C is incorrect as it refers to manual marking from the playbook task, which is not a valid method, and option E is not applicable as it involves a command that is not recognized as part of the evidence marking process.