Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Palo Alto Networks
Exam Format
Registration
Validity
PCSAE Exam Topics and Domains
PCSAE is organized into 6 weighted domains. Expect to work with Cortex XSOAR, Cortex XSOAR debugger, Cortex XSOAR Marketplace, Cortex XSOAR playbooks, and more.
Playbook Development
Context Data Management
Reference and manipulate context data to manage automation workflow
Playbook Tasks Configuration
- Summarize inputs, outputs, and results for playbook tasks
- Configure inputs and outputs for subplaybook tasks
- Enable and configure looping on a subplaybook
Playbook Task Types
Differentiate among playbook task types
Data Manipulation
Apply filters and transformers to manipulate data
Playbook Debugging
Apply the playbook debugger to aid in developing playbooks
Incident Objects
Incident Types Configuration
- Configure incident types
- Identify the role of an incident type within the incident lifecycle
Incident Layouts
Configure an incident layout
Incident Fields
Summarize the function, capabilities, and purpose of incident fields
Classifiers and Mappers
Configure classifiers and mappers
Automations, Integrations, and Related Concepts
Automation Capabilities
Define the capabilities of automation across XSOAR functions
Automations vs Commands vs Scripts
Differentiate between automations, commands, and scripts
Automation Scripts
Interpret and modify automation scripts
Integration Framework
Identify the properties and capabilities of the XSOAR framework for integration
Integration Instances
Configure and manage integration instances
Content Management and Solution Architecture
Marketplace Concepts
Apply marketplace concepts for the management of content
Content Customization
Apply general content customization and management concepts
Remote Repository Management
Manage local changes in a remote repository (dev-prod) configuration
System Architecture
Describe the components of the XSOAR system architecture
Incident Lifecycle
Describe the incident lifecycle within XSOAR
RBAC (Role-Based Access Control)
Define the capabilities of RBAC
Troubleshooting and Performance
- Identify the troubleshooting tools available to obtain more diagnostic information
- Identify options available for performance tuning
- Monitor system health using the System Diagnostics page
UI Workflow, Dashboards, and Reports
Data Querying
Identify methods for querying data
Investigation Workflow
Summarize the workflow elements used during an investigation
Layout Interaction
Interact with layouts for incident management
Incident Management Tools
Summarize tools used for managing incidents
Dashboards and Reports
- Identify the capabilities of existing dashboards and reports
- Summarize what information can be created, edited, or shared within dashboards and reports
- Summarize the capabilities of widget builder
Threat Intel Management
Indicator Objects
Identify the parameters available for configuring indicator Objects
Threat Intel Reports
Generate threat intel reports
Threat Intel Page
Describe the features of the Threat Intel page
Threat Intel Feeds
Configure threat intel feed integrations
Auto Extract
Identify the options available to auto extract
How do I earn this certification?
Passing PCSAE earns the PCSAE - Security Automation Engineer certification. It sits in the Security Operations track.
- PCCSE - Prisma Certified Cloud Security EngineerCloud security automation skills
- PCSFE - Palo Alto Networks Certified Software Firewall Engineer Software-defined security
- XSIAM-Analyst - Cortex XSIAM AnalystNext-gen SOC platform (potential replacement)
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for PCSAE is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
- RETIRING
- Last content update: 2022-08-22
- Announcement date: 2024-01-01
- Cortex XSOAR 8.0 May not be reflected in current exam version • Release date: 2024-11-15
- XSOAR Marketplace Latest Integration concepts covered in exam • Release date: Continuous updates
Who should take this exam?
This exam is typically taken by Security Engineers and SOC Analysts.
- Experience with Cortex XSOAR platform
- Understanding of SOC operations
- Knowledge of security orchestration and automation concepts
- Completion of EDU-380 course or equivalent experience