Enhance your career with PSE-Cortex PDF Dumps - True Palo Alto Networks Exam Questions
New (2022) Download free PSE-Cortex PDF for Palo Alto Networks Practice Tests
NEW QUESTION 36
Which Cortex XDR capability extends investigations to an endpoint?
- A. Log Stitching
- B. Live Terminal
- C. Sensors
- D. Causality Chain
Answer: A
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-concepts
NEW QUESTION 37
The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.) SUCCESS
- A. The modified scnpt was run in the wrong Docker image
- B. The dictionary was defined incorrectly in the second script.
- C. The modified script attempted to access a dictionary key that did not exist in the dictionary named
"data" - D. The modified script required a different parameter to run successfully.
Answer: A
NEW QUESTION 38
A General Purpose Dynamic Section can be added to which two layouts for incident types? (Choose two)
- A. Incident Summary
- B. "Close" Incident Form
- C. "New"/Edit" Incident Form
- D. Incident Quick View
Answer: A,D
NEW QUESTION 39
Given the integration configuration and error in the screenshot what is the cause of the problem?
- A. incorrect Username and Password
- B. incorrect instance name
- C. incorrect appliance port
- D. incorrect server URL
Answer: A
NEW QUESTION 40
When analyzing logs for indicators, which are used for only BIOC identification'?
- A. error messages
- B. observed activity
- C. techniques
- D. artifacts
Answer: C
NEW QUESTION 41
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. not Contains
- B. =>
- C. < >
- D. !*
Answer: A,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-c
NEW QUESTION 42
How many use cases should a POC success criteria document include?
- A. 3 or more
- B. only 1
- C. no more than 2
- D. no more than 5
Answer: B
NEW QUESTION 43
Rearrange the steps into the correct order for modifying an incident layout.
Answer:
Explanation:
1 - Navigate to Settings > Advanced > Incident Types
2 - Select the incident type you want to customize the layout view for
3 - Edit the layout
4 - Select the Edit Layout option
5 - Navigate to Settings > Layout Builder
NEW QUESTION 44
When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?
- A. splunk-get-alerts integration command
- B. Cortex XSOAR TA App for Splunk
- C. SplunkGO integration
- D. SplunkSearch automation
Answer: B
NEW QUESTION 45
A test for a Microsoft exploit has been planned. After some research Internet Explorer 11 CVE-2016-0189 has been selected and a module in Metasploit has been identified (exploit/windows/browser/ms16_051_vbscript) The description and current configuration of the exploit are as follows;
What is the remaining configuration?
A)
B)
C)
D)
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: B
NEW QUESTION 46
Which task allows the playbook to follow different paths based on specific conditions?
- A. Parallel
- B. Automation
- C. Manual
- D. Conditional
Answer: C
NEW QUESTION 47
An administrator has a critical group of systems running Windows XP SP3 that cannot be upgraded The administrator wants to evaluate the ability of Traps to protect these systems and the word processing applications running on them How should an administrator perform this evaluation?
- A. Gather information about the word processing applications and run them on a Windows XP SP3 VM Determine if any of the applications are vulnerable and run the exploit with an exploitation tool
- B. Run word processing exploits in a latest version of Windows VM in a controlled and isolated environment. Document indicators of compromise and compare to Traps protection capabilities
- C. Prepare the latest version of Windows VM Gather information about the word processing applications, determine if some of them are vulnerable and prepare a working exploit for at least one of them Execute with an exploitation tool
- D. Run a known 2015 flash exploit on a Windows XP SP3 VM. and run an exploitation tool that acts as a listener Use the results to demonstrate Traps capabilities
Answer: D
NEW QUESTION 48
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. Is Contained By
- B. < >
- C. =
- D. Contains
Answer: C,D
NEW QUESTION 49
How do sub-playbooks affect the Incident Context Data?
- A. When set to global, sub-playbook tasks do not have access to the root context
- B. When set to global, allows parallel task execution.
- C. When set to private, task outputs automatically get written to the root context
- D. When set to private, task outputs do not automatically get written to the root context
Answer: A
NEW QUESTION 50
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )
- A. hostname
- B. alert root cause
- C. OS
- D. domain/workgroup membership
- E. presence of Flash executable
Answer: B,D,E
NEW QUESTION 51
If you have a playbook task that errors out. where could you see the output of the task?
- A. /var/log/messages
- B. Playbook Editor
- C. Demisto Audit log
- D. War Room of the incident
Answer: D
NEW QUESTION 52
Whichfour types of Traps logs are stored within Cortex Data Lake?
- A. Threat, Config, System, Analytic
- B. Threat, Config, System,Data
- C. Threat, Config, Authentication, Analytic
- D. Threat, Monitor. System, Analytic
Answer: B
NEW QUESTION 53
......
100% Free PSE-Cortex Files For passing the exam Quickly: https://www.actual4cert.com/PSE-Cortex-real-questions.html
PSE-Cortex Dumps Questions Study Exam Guide : https://drive.google.com/open?id=1CDzeMpd97PI6lpJJrCDj4Pv07AG-3WwC