PSE-Cortex Questions Pass on Your First Attempt Dumps for Palo Alto Networks Certification Certified
PSE-Cortex Practice Test Pdf Exam Material
NEW QUESTION 15
If you have a playbook task that errors out. where could you see the output of the task?
- A. /var/log/messages
- B. Demisto Audit log
- C. Playbook Editor
- D. War Room of the incident
Answer: D
NEW QUESTION 16
Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?
- A. ZIP
- B. SH
- C. RPM
- D. DEB
Answer: A
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/engines/install-deploy-and-configure-demisto-engines/create-a-new-engine.html
NEW QUESTION 17
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?
- A. 1 TB
- B. 10 GB
- C. 100 GB
- D. 10 TB
Answer: A
NEW QUESTION 18
A prospect has agreed to do a 30-day POC and asked to integrate with a product that Demisto currently does not have an integration with. How should you respond?
- A. Tell them we can build it with Professional Services.
- B. Extend the POC window to allow the solution architects to build it
- C. Tell them custom integrations are not created as part of the POC
- D. Agree to build the integration as part of the POC
Answer: B
NEW QUESTION 19
Which option is required to prepare the VDI Golden Image?
- A. Install the Cortex XOR Agent on the local machine
- B. Use the Cortex XDR VDI tool to obtain verdicts for all PE files
- C. Run the Cortex VDI conversion tool
- D. Configure the Golden Image as a persistent VDI
Answer: C
NEW QUESTION 20
The certificate used for decryption was installed as a trusted root CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?
- A. enable SSL decryption
- B. add paloaltonetworks com to the SSL Decryption Exclusion list
- C. reinstall the root CA certificate
- D. disable SSL decryption
Answer: C
NEW QUESTION 21
When a Demisto Engine is part of a Load-Balancing group it?
- A. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance
- B. It must have port 443 open to allow the Demisto Server to establish a connection
- C. Can be used separately as an engine, only if connected to the Demisto Server directly
- D. Must be in a Load-Balancing group with at least another 3 members
Answer: A
NEW QUESTION 22
Which four types of Traps logs are stored within Cortex Data Lake?
- A. Threat, Monitor. System, Analytic
- B. Threat, Config, Authentication, Analytic
- C. Threat, Config, System, Data
- D. Threat, Config, System, Analytic
Answer: D
NEW QUESTION 23
A test for a Microsoft exploit has been planned. After some research Internet Explorer 11 CVE-2016-0189 has been selected and a module in Metasploit has been identified (exploit/windows/browser/ms16_051_vbscript) The description and current configuration of the exploit are as follows;
What is the remaining configuration?
A)
B)
C)
D)
- A. Option D
- B. Option A
- C. Option C
- D. Option B
Answer: A
NEW QUESTION 24
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. =>
- B. !*
- C. not Contains
- D. < >
Answer: B,C
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-c
NEW QUESTION 25
What are process exceptions used for?
- A. disable an EPM for a particular process
- B. permit processes to load specific DLLs
- C. whitelist programs from WildFire analysis
- D. change the WildFire verdict for a given executable
Answer: C
NEW QUESTION 26
Rearrange the steps into the correct order for modifying an incident layout.
Answer:
Explanation:
NEW QUESTION 27
Which Cortex XDR capability extends investigations to an endpoint?
- A. Log Stitching
- B. Sensors
- C. Live Terminal
- D. Causality Chain
Answer: A
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-conc
NEW QUESTION 28
The certificate used for decryption was installed as a trusted toot CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console. What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?
- A. enable SSL decryption
- B. reinstall the root CA certificate
- C. add paloaltonetworks.com to the SSL Decryption Exclusion list
- D. disable SSL decryption
Answer: B
NEW QUESTION 29
An EDR project was initiated by a CISO. Which resource will likely have the most heavy influence on the project?
- A. SOC analyst IT
- B. operations manager
- C. SOC manager
- D. desktop engineer
Answer: C
NEW QUESTION 30
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
- A. Cortex XDR Prevent
- B. Cortex XDR Pro Per Endpoint
- C. Cortex XDR Endpoint
- D. Cortex XDR Pro per TB
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licen
NEW QUESTION 31
In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?
- A. enable the docker service
- B. create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group
- C. create a "docker" group and add the "Cortex XSOAR" or "demisto" user to this group
- D. disable the Cortex XSOAR service
Answer: C
NEW QUESTION 32
A General Purpose Dynamic Section can be added to which two layouts for incident types? (Choose two)
- A. Incident Summary
- B. "Close" Incident Form
- C. Incident Quick View
- D. "New"/Edit" Incident Form
Answer: A,C
NEW QUESTION 33
......
PSE-Cortex [Dec-2021] Newly Released] Exam Questions For You To Pass: https://www.trainingdumps.com/PSE-Cortex_exam-valid-dumps.html
PSE-Cortex Answers PSE-Cortex Free Demo Are Based On The Real Exam: https://drive.google.com/open?id=17iXJYk4Pbd1HletQCHIPLXf2okOogcY4
