PDF Download Free of PSE-Cortex Valid Practice Test Questions
PSE-Cortex Test Engine files, PSE-Cortex Dumps PDF
NEW QUESTION # 17
An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project's operational considerations'?
- A. endpoint manager
- B. SOC manager
- C. SOC analyst
- D. desktop engineer
Answer: C
NEW QUESTION # 18
In the DBotScore context field, which context key would differentiate between multiple entries for the same indicator in a multi-TIP environment?
- A. Vendor
- B. Type
- C. Brand
- D. Using
Answer: A
NEW QUESTION # 19
What is the difference between an exception and an exclusion?
- A. An exception is based on rules and exclusions are on alerts
- B. An exclusion is based on rules and exceptions are based on alerts.
- C. An exclusion does not exist
- D. An exception does not exist
Answer: A
NEW QUESTION # 20
Which two log types should be configured for firewall forwarding to the Cortex Data Lake for use by Cortex XDR? (Choose two)
- A. HIP
- B. Security Event
- C. Analytics
- D. Correlation
Answer: A,B
NEW QUESTION # 21
How can you view all the relevant incidents for an indicator?
- A. Linked Incidents column in Indicator Screen
- B. Linked Indicators column in Incident Screen
- C. Related Indicators column in Incident Screen
- D. Related Incidents column in Indicator Screen
Answer: D
NEW QUESTION # 22
How do sub-playbooks affect the Incident Context Data?
- A. When set to global, allows parallel task execution.
- B. When set to global, sub-playbook tasks do not have access to the root context
- C. When set to private, task outputs automatically get written to the root context
- D. When set to private, task outputs do not automatically get written to the root context
Answer: B
NEW QUESTION # 23
What is the result of creating an exception from an exploit security event?
- A. exempts administrators from generating alerts for 24 hours
- B. White lists the process from Wild Fire analysis
- C. disables the triggered EPM for the host and process involve
- D. exempts the user from generating events for 24 hours
Answer: C
NEW QUESTION # 24
How can you view all the relevant incidents for an indicator?
- A. Linked Incidents column in Indicator Screen
- B. Related Incidents column in Indicator Screen
- C. Related Indicators column in Incident Screen
- D. Linked Indicators column in Incident Screen
Answer: D
NEW QUESTION # 25
When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?
- A. SplunkGO integration
- B. splunk-get-alerts integration command
- C. Cortex XSOAR TA App for Splunk
- D. SplunkSearch automation
Answer: B
NEW QUESTION # 26
If you have a playbook task that errors out. where could you see the output of the task?
- A. War Room of the incident
- B. Demisto Audit log
- C. /var/log/messages
- D. Playbook Editor
Answer: D
NEW QUESTION # 27
What is the retention requirement for Cortex Data Lake sizing?
- A. logs per second
- B. number of VM-Series NGFW
- C. number of endpoints
- D. number of days
Answer: D
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-cortex-data-lake/set-log-storage-quota
NEW QUESTION # 28
Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?
Which two playbook functionalities allow looping through a group of tasks during playbook execution? (Choose two.)
- A. Sub-Play books
- B. Playbook Functions
- C. Generic Polling Automation Playbook
- D. Playbook Tasks
Answer: A,C
NEW QUESTION # 29
Which step is required to prepare the VDI Golden Image?
- A. Ensure the latest content updates are installed
- B. Set the memory dumps to manual setting
- C. Review any PE files that WildFire determined to be malicious
- D. Run the VDI conversion tool
Answer: C
NEW QUESTION # 30
Given the integration configuration and error in the screenshot what is the cause of the problem?
- A. incorrect instance name
- B. incorrect server URL
- C. incorrect appliance port
- D. incorrect Username and Password
Answer: A
NEW QUESTION # 31
When analyzing logs for indicators, which are used for only BIOC identification'?
- A. techniques
- B. observed activity
- C. error messages
- D. artifacts
Answer: B
NEW QUESTION # 32
Which step is required to prepare the VDI Golden Image?
- A. Review any PE files that WildFire determined to be malicious
- B. Ensure the latest content updates are installed
- C. Set the memory dumps to manual setting
- D. Run the VDI conversion tool
Answer: C
NEW QUESTION # 33
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. not Contains
- B. =>
- C. !*
- D. < >
Answer: A,C
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-cortex-xdr/manage-tables.html
NEW QUESTION # 34
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. Is Contained By
- B. =
- C. Contains
- D. < >
Answer: B,C
NEW QUESTION # 35
......
Pass Your Palo Alto Networks Certification PSE-Cortex Exam on Jan 09, 2024 with 60 Questions: https://www.dumpsvalid.com/PSE-Cortex-still-valid-exam.html
Latest Palo Alto Networks PSE-Cortex PDF and Dumps (2024) Free Exam Questions Answers: https://drive.google.com/open?id=17eTxnKVG7UetYIWdoY-hPSYtdNahaaT3