New (2023) Palo Alto Networks PSE-Cortex Exam Dumps
Best Way To Study For Palo Alto Networks PSE-Cortex Exam Brilliant PSE-Cortex Exam Questions PDF
NEW QUESTION 36
The certificate used for decryption was installed as a trusted toot CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console. What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?
- A. disable SSL decryption
- B. reinstall the root CA certificate
- C. add paloaltonetworks.com to the SSL Decryption Exclusion list
- D. enable SSL decryption
Answer: B
NEW QUESTION 37
Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types?
(Choose three.)
- A. Add new fields to an incident type
- B. Drop new incidents of the same type that contain similar information
- C. Define whether a playbook runs automatically when an incident type is encountered
- D. Define the way that incidents of a specific type are displayed in the system
- E. Set reminders for an incident SLA
Answer: B,C,D
NEW QUESTION 38
Which process in the causality chain does the Cortex XDR agent identify as triggering an event sequence?
- A. the relevant shell
- B. the chain's alert initiator
- C. the adversary's remote process
- D. The causality group owner
Answer: D
NEW QUESTION 39
Which two formats are supported by Whitelist? (Choose two)
- A. Regex
- B. CSV
- C. STIX
- D. CIDR
Answer: A,D
NEW QUESTION 40
When analyzing logs for indicators, which are used for only BIOC identification'?
- A. techniques
- B. observed activity
- C. error messages
- D. artifacts
Answer: B
NEW QUESTION 41
Which option is required to prepare the VDI Golden Image?
- A. Install the Cortex XOR Agent on the local machine
- B. Configure the Golden Image as a persistent VDI
- C. Run the Cortex VDI conversion tool
- D. Use the Cortex XDR VDI tool to obtain verdicts for all PE files
Answer: D
NEW QUESTION 42
Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?
Which two playbook functionalities allow looping through a group of tasks during playbook execution?
(Choose two.)
- A. Playbook Tasks
- B. Generic Polling Automation Playbook
- C. Playbook Functions
- D. Sub-Play books
Answer: C,D
NEW QUESTION 43
Given the integration configuration and error in the screenshot what is the cause of the problem?
- A. incorrect appliance port
- B. incorrect instance name
- C. incorrect server URL
- D. incorrect Username and Password
Answer: D
NEW QUESTION 44
An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
- A. Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
- B. With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module
- C. In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
- D. Contact support and ask for a security exception.
Answer: D
NEW QUESTION 45
How do sub-playbooks affect the Incident Context Data?
- A. When set to private, task outputs do not automatically get written to the root context
- B. When set to global, allows parallel task execution.
- C. When set to private, task outputs automatically get written to the root context
- D. When set to global, sub-playbook tasks do not have access to the root context
Answer: A
NEW QUESTION 46
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. registry entry
- B. endpoint hostname
- C. IP
- D. domain
Answer: A,B
NEW QUESTION 47
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )
- A. domain/workgroup membership
- B. OS
- C. presence of Flash executable
- D. hostname
- E. alert root cause
Answer: A,C,E
NEW QUESTION 48
Rearrange the steps into the correct order for modifying an incident layout.
Answer:
Explanation:
NEW QUESTION 49
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?
- A. 10 TB
- B. 100 GB
- C. 10 GB
- D. 1 TB
Answer: D
NEW QUESTION 50
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. not Contains
- B. =>
- C. !*
- D. < >
Answer: A,C
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-cortex-xdr/manage-tables.html
NEW QUESTION 51
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)
- A. Domain/workgroup membership
- B. attack threat intelligence tag
- C. OS
- D. quarantine status
- E. hostname
Answer: A,C,E
NEW QUESTION 52
What are process exceptions used for?
- A. permit processes to load specific DLLs
- B. change the WildFire verdict for a given executable
- C. disable an EPM for a particular process
- D. whitelist programs from WildFire analysis
Answer: D
NEW QUESTION 53
In the DBotScore context field, which context key would differentiate between multiple entries for the same indicator in a multi-TIP environment?
- A. Brand
- B. Using
- C. Type
- D. Vendor
Answer: D
NEW QUESTION 54
A prospect has agreed to do a 30-day POC and asked to integrate with a product that Demisto currently does not have an integration with. How should you respond?
- A. Agree to build the integration as part of the POC
- B. Extend the POC window to allow the solution architects to build it
- C. Tell them we can build it with Professional Services.
- D. Tell them custom integrations are not created as part of the POC
Answer: B
NEW QUESTION 55
......
Updated Verified Pass PSE-Cortex Exam - Real Questions and Answers: https://examcollection.bootcamppdf.com/PSE-Cortex-exam-actual-tests.html