Palo Alto Networks XSIAM Analyst — Question 4

For a critical incident, Cortex XSIAM suggests several playbooks which should have been executed automatically.
Why were the playbooks not executed?

Answer options

• A. Playbook triggers were not configured for those alerts.
• B. Installation of the appropriate content pack was not completed.
• C. Misconfiguration of the connector instance has occurred.
• D. Playbook classifier was not configured for the alert type.

Correct answer: A

Explanation

The correct answer is A because if playbook triggers are not configured for specific alerts, the playbooks cannot execute automatically. Options B and C may hinder functionality, but they do not directly prevent the execution of playbooks for alerts that are triggered. Option D would also affect execution, but A explicitly addresses the lack of trigger configuration.