PSE-Cortex Practice Dumps - Verified By iPassleader Updated 60 Questions
Updated PSE-Cortex Exam Dumps - PDF Questions and Testing Engine
NEW QUESTION 31
How can you view all the relevant incidents for an indicator?
- A. Linked Indicators column in Incident Screen
- B. Related Incidents column in Indicator Screen
- C. Related Indicators column in Incident Screen
- D. Linked Incidents column in Indicator Screen
Answer: B
NEW QUESTION 32
An adversary is attempting to communicate with malware running on your network for the purpose of controlling malware activities or for ex filtrating data from your network. Which Cortex XDR Analytics alert is this activity most likely to trigger'?
- A. DNS Tunneling
- B. Uncommon Local Scheduled Task Creation
- C. Malware
- D. New Administrative Behavior
Answer: C
NEW QUESTION 33
Which CLI query would bring back Notable Events from Splunk?
A)
B)
C)
D)
- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: D
NEW QUESTION 34
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. domain
- B. registry entry
- C. IP
- D. endpoint hostname
Answer: A,C
NEW QUESTION 35
Which CLI query would bring back Notable Events from Splunk?
A)
B)
C)
D)
- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: D
NEW QUESTION 36
A General Purpose Dynamic Section can be added to which two layouts for incident types? (Choose two)
- A. "New"/Edit" Incident Form
- B. "Close" Incident Form
- C. Incident Quick View
- D. Incident Summary
Answer: C,D
NEW QUESTION 37
Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?
- A. RPM
- B. DEB
- C. ZIP
- D. SH
Answer: C
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/engines/install-deploy-and-configure-demisto-engines/create-a-new-engine.html
NEW QUESTION 38
An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
- A. Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
- B. With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module
- C. Contact support and ask for a security exception.
- D. In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
Answer: A,D
NEW QUESTION 39
Which four types of Traps logs are stored within Cortex Data Lake?
- A. Threat, Config, Authentication, Analytic
- B. Threat, Config, System, Data
- C. Threat, Config, System, Analytic
- D. Threat, Monitor. System, Analytic
Answer: C
NEW QUESTION 40
An EDR project was initiated by a CISO. Which resource will likely have the most heavy influence on the project?
- A. SOC manager
- B. desktop engineer
- C. operations manager
- D. SOC analyst IT
Answer: A
NEW QUESTION 41
What is the result of creating an exception from an exploit security event?
- A. exempts administrators from generating alerts for 24 hours
- B. exempts the user from generating events for 24 hours
- C. disables the triggered EPM for the host and process involve
- D. White lists the process from Wild Fire analysis
Answer: C
NEW QUESTION 42
Given the integration configuration and error in the screenshot what is the cause of the problem?
- A. incorrect instance name
- B. incorrect appliance port
- C. incorrect server URL
- D. incorrect Username and Password
Answer: A
NEW QUESTION 43
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. registry entry
- B. IP
- C. domain
- D. endpoint hostname
Answer: A,D
NEW QUESTION 44
When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?
- A. SplunkSearch automation
- B. SplunkGO integration
- C. splunk-get-alerts integration command
- D. Cortex XSOAR TA App for Splunk
Answer: D
NEW QUESTION 45
Which option describes a Load-Balancing Engine Group?
- A. A group of engines that use an algorithm to efficiently share the workload for integrations
- B. A group of D2 agents that share processing power across multiple endpoints
- C. A group of engines that use an algorithm to efficiently share the workload for automation scripts
- D. A group of engines that ensure High Availability of Demisto backend databases.
Answer: C
NEW QUESTION 46
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
- A. Cortex XDR Endpoint
- B. Cortex XDR Pro per TB
- C. Cortex XDR Pro Per Endpoint
- D. Cortex XDR Prevent
Answer: C
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licenses/migrate-your-cortex-xdr-license
NEW QUESTION 47
......
New (2021) Palo Alto Networks PSE-Cortex Exam Dumps: https://www.ipassleader.com/Palo-Alto-Networks/PSE-Cortex-practice-exam-dumps.html
Best Way To Study For Palo Alto Networks PSE-Cortex Exam Brilliant PSE-Cortex Exam Questions PDF: https://drive.google.com/open?id=14NQF4EQpGI4csIcb3mzqNvcm-YHGdHgM