Steps Necessary To Pass The PSE-Cortex Exam from Training Expert PassExamDumps
Valid Way To Pass Palo Alto Networks Certification's PSE-Cortex Exam
NEW QUESTION 25
The prospect is deciding whether to go with a phishing or a ServiceNow use case as part of their POC We have integrations for both but a playbook for phishing only Which use case should be used for the POC?
- A. neither
- B. ServiceNow
- C. phishing
- D. either
Answer: C
NEW QUESTION 26
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )
- A. alert root cause
- B. hostname
- C. OS
- D. domain/workgroup membership
- E. presence of Flash executable
Answer: B,C,D
NEW QUESTION 27
When analyzing logs for indicators, which are used for only BIOC identification'?
- A. observed activity
- B. artifacts
- C. error messages
- D. techniques
Answer: D
NEW QUESTION 28
Which option is required to prepare the VDI Golden Image?
- A. Install the Cortex XOR Agent on the local machine
- B. Run the Cortex VDI conversion tool
- C. Use the Cortex XDR VDI tool to obtain verdicts for all PE files
- D. Configure the Golden Image as a persistent VDI
Answer: C
NEW QUESTION 29
A prospect has agreed to do a 30-day POC and asked to integrate with a product that Demisto currently does not have an integration with. How should you respond?
- A. Tell them custom integrations are not created as part of the POC
- B. Tell them we can build it with Professional Services.
- C. Agree to build the integration as part of the POC
- D. Extend the POC window to allow the solution architects to build it
Answer: A
NEW QUESTION 30
Which two log types should be configuredfor firewall forwarding to the Cortex Data Lake for use by Cortex XDR?(Choose two)
- A. Security Event
- B. HIP
- C. Correlation
- D. Analytics
Answer: A,D
NEW QUESTION 31
When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?
- A. SplunkGO integration
- B. SplunkSearch automation
- C. Cortex XSOAR TA App for Splunk
- D. splunk-get-alerts integration command
Answer: D
NEW QUESTION 32
How does DBot score an indicator that has multiple reputation scores?
- A. the reputation as undefined
- B. uses the least severe score
- C. uses the average score
- D. uses the most severe score scores
Answer: D
NEW QUESTION 33
Which two entities can be created as a BIOC? (Choose two.)
- A. file
- B. alert log
- C. registry
- D. event log
Answer: A,C
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/cortex-xd
NEW QUESTION 34
What are process exceptions used for?
- A. change the WildFire verdict for a given executable
- B. disable an EPM for a particular process
- C. permit processes to load specific DLLs
- D. whitelist programs from WildFire analysis
Answer: D
NEW QUESTION 35
Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?
- A. Device Control
- B. Device Customization
- C. Agent Configuration
- D. Agent Management
Answer: A
Explanation:
Explanation
https://live.paloaltonetworks.com/t5/blogs/cortex-xdr-features-introduced-in-december-2019/ba-p/302231
NEW QUESTION 36
"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?
- A. @Bob
- B. /invite Bob
- C. #Bob
- D. !invite Bob
Answer: A
NEW QUESTION 37
"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?
- A. /invite Bob
- B. @Bob
- C. #Bob
- D. !invite Bob
Answer: C
NEW QUESTION 38
Which two items are stitched to the Cortex XDR causality chain'' (Choose two)
- A. full URL
- B. SIEM alert
- C. firewall alert
- D. registry set value
Answer: A,C
NEW QUESTION 39
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
- A. Cortex XDR Endpoint
- B. Cortex XDR Prevent
- C. Cortex XDR Pro Per Endpoint
- D. Cortex XDR Pro per TB
Answer: A
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licen
NEW QUESTION 40
What method does the Traps agent use to identify malware during a scheduled scan?
- A. Heuristic analysis
- B. WildFire hash comparison and dynamic analysis
- C. Local analysis
- D. Signature comparison
Answer: B
NEW QUESTION 41
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. endpoint hostname
- B. domain
- C. IP
- D. registry entry
Answer: B,C
NEW QUESTION 42
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
- A. xnettraps.paloaltonetworks.com
- B. cc-xnet50.traps.paloaltonetworks.com
- C. hc-xnet50.traps.paloaltonetworks.com
- D. cc.xnet50traps.paloaltonetworks.com
- E. ch-xnet.traps.paloaltonetworks.com
- F. cc-xnet.traps.paloaltonetworks.com
Answer: B,E,F
NEW QUESTION 43
......
All PSE-Cortex Dumps and Palo Alto Networks System Engineer - Cortex Professional Training Courses: https://www.passexamdumps.com/PSE-Cortex-valid-exam-dumps.html
Free Test Engine For Palo Alto Networks System Engineer - Cortex Professional Certification Exams: https://drive.google.com/open?id=1X3sH5hrmiiorlE8IYEiGDADgEHE1HE_C
