We provide real PSE-Cortex exam questions and answers braindumps in two formats. Download PDF & Practice Tests. Pass Paloalto-Networks PSE-Cortex Exam quickly & easily. The PSE-Cortex PDF type is available for reading and printing. You can print more and practice many times. With the help of our Paloalto-Networks PSE-Cortex dumps pdf and vce product and material, you can easily pass the PSE-Cortex exam.
Online PSE-Cortex free questions and answers of New Version:
NEW QUESTION 1
Which step is required to prepare the VDI Golden Image?
- A. Review any PE files that WildFire determined to be malicious
- B. Ensure the latest content updates are installed
- C. Run the VDI conversion tool
- D. Set the memory dumps to manual setting
Answer: A
NEW QUESTION 2
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )
- A. alert root cause
- B. hostname
- C. domain/workgroup membership
- D. OS
- E. presence of Flash executable
Answer: BCD
NEW QUESTION 3
Which option is required to prepare the VDI Golden Image?
- A. Configure the Golden Image as a persistent VDI
- B. Use the Cortex XDR VDI tool to obtain verdicts for all PE files
- C. Install the Cortex XOR Agent on the local machine
- D. Run the Cortex VDI conversion tool
Answer: B
NEW QUESTION 4
What is the result of creating an exception from an exploit security event?
- A. White lists the process from Wild Fire analysis
- B. exempts the user from generating events for 24 hours
- C. exempts administrators from generating alerts for 24 hours
- D. disables the triggered EPM for the host and process involve
Answer: D
NEW QUESTION 5
Which two formats are supported by Whitelist? (Choose two)
- A. Regex
- B. STIX
- C. CSV
- D. CIDR
Answer: AD
NEW QUESTION 6
A General Purpose Dynamic Section can be added to which two layouts for incident types? (Choose two)
- A. "Close" Incident Form
- B. Incident Summary
- C. Incident Quick View
- D. "New"/Edit" Incident Form
Answer: BC
NEW QUESTION 7
When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?
- A. splunk-get-alerts integration command
- B. Cortex XSOAR TA App for Splunk
- C. SplunkSearch automation
- D. SplunkGO integration
Answer: B
NEW QUESTION 8
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance. Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?
- A. 1 TB
- B. 10 GB
- C. 100 GB
- D. 10 TB
Answer: C
NEW QUESTION 9
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. < >
- B. Contains
- C. =
- D. Is Contained By
Answer: BC
NEW QUESTION 10
Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?
- A. RPM
- B. SH
- C. DEB
- D. ZIP
Answer: D
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/engines/install-deploy-and-confi
NEW QUESTION 11
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. not Contains
- B. !*
- C. =>
- D. < >
Answer: AB
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-c
NEW QUESTION 12
In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?
- A. create a “docker” group and add the "Cortex XSOAR" or "demisto" user to this group
- B. create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group
- C. disable the Cortex XSOAR service
- D. enable the docker service
Answer: A
NEW QUESTION 13
A test for a Microsoft exploit has been planned. After some research Internet Explorer 11 CVE-2016-0189 has been selected and a module in Metasploit has been identified
(exploit/windows/browser/ms16_051_vbscript)
The description and current configuration of the exploit are as follows;
What is the remaining configuration?
A)
B)
C)
D)
- A. Option A
- B. Option B
- C. Option C
- D. Option D
Answer: D
NEW QUESTION 14
Which Cortex XDR capability extends investigations to an endpoint?
- A. Log Stitching
- B. Causality Chain
- C. Sensors
- D. Live Terminal
Answer: A
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-conc
NEW QUESTION 15
How many use cases should a POC success criteria document include?
- A. only 1
- B. 3 or more
- C. no more than 5
- D. no more than 2
Answer: A
NEW QUESTION 16
Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?
- A. Agent Configuration
- B. Device Control
- C. Device Customization
- D. Agent Management
Answer: B
Explanation:
https://live.paloaltonetworks.com/t5/blogs/cortex-xdr-features-introduced-in-december-2019/ba-p/302231
NEW QUESTION 17
Which process in the causality chain does the Cortex XDR agent identify as triggering an event sequence?
- A. the relevant shell
- B. The causality group owner
- C. the adversary's remote process
- D. the chain's alert initiator
Answer: B
NEW QUESTION 18
......
P.S. 2passeasy now are offering 100% pass ensure PSE-Cortex dumps! All PSE-Cortex exam questions have been updated with correct answers: https://www.2passeasy.com/dumps/PSE-Cortex/ (60 New Questions)