Get New 2022 Valid Practice Palo Alto Networks Certification PSE-Cortex Q&A - Testing Engine
PSE-Cortex Dumps PDF - 100% Passing Guarantee
NEW QUESTION 20
Given the integration configuration and error in the screenshot what is the cause of the problem?
- A. incorrect server URL
- B. incorrect Username and Password
- C. incorrect instance name
- D. incorrect appliance port
Answer: B
NEW QUESTION 21
How many use cases should a POC success criteria document include?
- A. only 1
- B. 3 or more
- C. no more than 5
- D. no more than 2
Answer: D
NEW QUESTION 22
If you have a playbook task that errors out. where could you see the output of the task?
- A. War Room of the incident
- B. Playbook Editor
- C. Demisto Audit log
- D. /var/log/messages
Answer: B
NEW QUESTION 23
Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types? (Choose three.)
- A. Define the way that incidents of a specific type are displayed in the system
- B. Add new fields to an incident type
- C. Define whether a playbook runs automatically when an incident type is encountered
- D. Drop new incidents of the same type that contain similar information
- E. Set reminders for an incident SLA
Answer: A,C,E
NEW QUESTION 24
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?
- A. 100 GB
- B. 10 TB
- C. 10 GB
- D. 1 TB
Answer: A
NEW QUESTION 25
Which process in the causality chain does the Cortex XDR agent identify as triggering an event sequence?
- A. the relevant shell
- B. the chain's alert initiator
- C. the adversary's remote process
- D. The causality group owner
Answer: D
NEW QUESTION 26
When analyzing logs for indicators, which are used for only BIOC identification'?
- A. error messages
- B. observed activity
- C. artifacts
- D. techniques
Answer: B
NEW QUESTION 27
"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?
- A. !invite Bob
- B. /invite Bob
- C. @Bob
- D. #Bob
Answer: C
NEW QUESTION 28
If an anomalous process is discovered while investigating the cause of a security event, you can take immediate action to terminate the process or the whole process tree, and block processes from running by initiating which Cortex XDR capability?
- A. File Explorer
- B. Live Terminal
- C. Log Stitching
- D. Live Sensors
Answer: B
NEW QUESTION 29
What are process exceptions used for?
- A. permit processes to load specific DLLs
- B. whitelist programs from WildFire analysis
- C. disable an EPM for a particular process
- D. change the WildFire verdict for a given executable
Answer: B
NEW QUESTION 30
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. Is Contained By
- B. =
- C. < >
- D. Contains
Answer: B,D
NEW QUESTION 31
In the DBotScore context field, which context key would differentiate between multiple entries for the same indicator in a multi-TIP environment?
- A. Vendor
- B. Type
- C. Brand
- D. Using
Answer: A
NEW QUESTION 32
A prospect has agreed to do a 30-day POC and asked to integrate with a product that Demisto currently does not have an integration with. How should you respond?
- A. Agree to build the integration as part of the POC
- B. Tell them we can build it with Professional Services.
- C. Extend the POC window to allow the solution architects to build it
- D. Tell them custom integrations are not created as part of the POC
Answer: C
NEW QUESTION 33
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
- A. ch-xnet.traps.paloaltonetworks.com
- B. cc-xnet.traps.paloaltonetworks.com
- C. cc.xnet50traps.paloaltonetworks.com
- D. xnettraps.paloaltonetworks.com
- E. hc-xnet50.traps.paloaltonetworks.com
- F. cc-xnet50.traps.paloaltonetworks.com
Answer: A,B,F
NEW QUESTION 34
Which two items are stitched to the Cortex XDR causality chain'' (Choose two)
- A. full URL
- B. firewall alert
- C. registry set value
- D. SIEM alert
Answer: A,B
NEW QUESTION 35
An administrator of a Cortex XDR protected production environment would like to test its ability to protect users from a known flash player exploit.
What is the safest way to do it?
- A. The administrator should attach a copy of the weapomzed flash file to an email, send the email to a selected group of employees, and monitor the Events tab on the Cortex XDR console
- B. The administrator should use the Cortex XDR tray icon to confirm his corporate laptop is fully protected then open the weaponized flash file on his machine, and monitor the Events tab on the Cortex XDR console.
- C. The administrator should place a copy of the weaponized flash file on several USB drives, scatter them around the office and monitor the Events tab on the Cortex XDR console
- D. The administrator should create a non-production Cortex XDR test environment that accurately represents the production environment, introduce the weaponized flash file, and monitor the Events tab on the Cortex XDR console.
Answer: A
NEW QUESTION 36
The certificate used for decryption was installed as a trusted toot CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console. What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?
- A. reinstall the root CA certificate
- B. add paloaltonetworks.com to the SSL Decryption Exclusion list
- C. enable SSL decryption
- D. disable SSL decryption
Answer: A
NEW QUESTION 37
Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?
- A. RPM
- B. ZIP
- C. SH
- D. DEB
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/engines/install-deploy-and-config
NEW QUESTION 38
......
PSE-Cortex Braindumps Real Exam Updated on Aug 31, 2022 with 60 Questions: https://pass4sure.examcost.com/PSE-Cortex-practice-exam.html
