100% Guaranteed Results PSE-Cortex Unlimited 60 Questions [2023]
PSE-Cortex Dumps PDF - Want To Pass PSE-Cortex Fast
NEW QUESTION 23
Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?
Which two playbook functionalities allow looping through a group of tasks during playbook execution? (Choose two.)
- A. Generic Polling Automation Playbook
- B. Playbook Tasks
- C. Playbook Functions
- D. Sub-Play books
Answer: A,D
NEW QUESTION 24
Which two entities can be created as a BIOC? (Choose two.)
- A. event log
- B. registry
- C. file
- D. alert log
Answer: B,C
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/cortex-xdr-indicators/working-with-biocs/create-a-bioc-rule.html
NEW QUESTION 25
Which option describes a Load-Balancing Engine Group?
- A. A group of engines that use an algorithm to efficiently share the workload for integrations
- B. A group of D2 agents that share processing power across multiple endpoints
- C. A group of engines that ensure High Availability of Demisto backend databases.
- D. A group of engines that use an algorithm to efficiently share the workload for automation scripts
Answer: D
NEW QUESTION 26
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. endpoint hostname
- B. IP
- C. domain
- D. registry entry
Answer: A,D
NEW QUESTION 27
The certificate used for decryption was installed as a trusted toot CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console.What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?
- A. disable SSL decryption
- B. add paloaltonetworks.com to the SSL Decryption Exclusion list
- C. enable SSL decryption
- D. reinstall the root CA certificate
Answer: A
NEW QUESTION 28
Rearrange the steps into the correct order for modifying an incident layout.
Answer:
Explanation:
NEW QUESTION 29
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. IP
- B. endpoint hostname
- C. registry entry
- D. domain
Answer: A,D
NEW QUESTION 30
Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types?
(Choose three.)
- A. Define the way that incidents of a specific type are displayed in the system
- B. Set reminders for an incident SLA
- C. Add new fields to an incident type
- D. Define whether a playbook runs automatically when an incident type is encountered
- E. Drop new incidents of the same type that contain similar information
Answer: A,D,E
NEW QUESTION 31
Which task allows the playbook to follow different paths based on specific conditions?
- A. Parallel
- B. Manual
- C. Automation
- D. Conditional
Answer: B
NEW QUESTION 32
Which four types of Traps logs are stored within Cortex Data Lake?
- A. Threat, Config, System, Data
- B. Threat, Monitor. System, Analytic
- C. Threat, Config, System, Analytic
- D. Threat, Config, Authentication, Analytic
Answer: C
NEW QUESTION 33
When a Demisto Engine is part of a Load-Balancing group it?
- A. Can be used separately as an engine, only if connected to the Demisto Server directly
- B. It must have port 443 open to allow the Demisto Server to establish a connection
- C. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance
- D. Must be in a Load-Balancing group with at least another 3 members
Answer: D
NEW QUESTION 34
What method does the Traps agent use to identify malware during a scheduled scan?
- A. Local analysis
- B. Signature comparison
- C. Heuristic analysis
- D. WildFire hash comparison and dynamic analysis
Answer: D
NEW QUESTION 35
Whichfour types of Traps logs are stored within Cortex Data Lake?
- A. Threat, Config, System, Analytic
- B. Threat, Monitor. System, Analytic
- C. Threat, Config, System,Data
- D. Threat, Config, Authentication, Analytic
Answer: C
NEW QUESTION 36
An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project's operational considerations'?
- A. endpoint manager
- B. SOC manager
- C. SOC analyst
- D. desktop engineer
Answer: C
NEW QUESTION 37
Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?
- A. Agent Configuration
- B. Device Control
- C. Agent Management
- D. Device Customization
Answer: B
Explanation:
https://live.paloaltonetworks.com/t5/blogs/cortex-xdr-features-introduced-in-december-2019/ba-p/302231
NEW QUESTION 38
If you have a playbook task that errors out. where could you see the output of the task?
- A. /var/log/messages
- B. Demisto Audit log
- C. War Room of the incident
- D. Playbook Editor
Answer: D
NEW QUESTION 39
An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
- A. Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
- B. Contact support and ask for a security exception.
- C. With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module
- D. In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
Answer: B
NEW QUESTION 40
A prospect has agreed to do a 30-day POC and asked to integrate with a product that Demisto currently does not have an integration with. How should you respond?
- A. Tell them custom integrations are not created as part of the POC
- B. Tell them we can build it with Professional Services.
- C. Agree to build the integration as part of the POC
- D. Extend the POC window to allow the solution architects to build it
Answer: A
NEW QUESTION 41
What is the difference between an exception and an exclusion?
- A. An exception does not exist
- B. An exclusion does not exist
- C. An exception is based on rules and exclusions are on alerts
- D. An exclusion is based on rules and exceptions are based on alerts.
Answer: C
NEW QUESTION 42
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
- A. cc-xnet.traps.paloaltonetworks.com
- B. xnettraps.paloaltonetworks.com
- C. hc-xnet50.traps.paloaltonetworks.com
- D. cc.xnet50traps.paloaltonetworks.com
- E. ch-xnet.traps.paloaltonetworks.com
- F. cc-xnet50.traps.paloaltonetworks.com
Answer: A,E,F
NEW QUESTION 43
If an anomalous process is discovered while investigating the cause of a security event, you can take immediate action to terminate the process or the whole process tree, and block processes from running by initiating which Cortex XDR capability?
- A. File Explorer
- B. Live Sensors
- C. Live Terminal
- D. Log Stitching
Answer: C
NEW QUESTION 44
Which option is required to prepare the VDI Golden Image?
- A. Install the Cortex XOR Agent on the local machine
- B. Configure the Golden Image as a persistent VDI
- C. Use the Cortex XDR VDI tool to obtain verdicts for all PE files
- D. Run the Cortex VDI conversion tool
Answer: D
NEW QUESTION 45
If you have a playbook task that errors out. where could you see the output of the task?
- A. /var/log/messages
- B. War Room of the incident
- C. Demisto Audit log
- D. Playbook Editor
Answer: B
NEW QUESTION 46
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
- A. Cortex XDR Pro Per Endpoint
- B. Cortex XDR Pro per TB
- C. Cortex XDR Prevent
- D. Cortex XDR Endpoint
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licen
NEW QUESTION 47
Which step is required to prepare the VDI Golden Image?
- A. Set the memory dumps to manual setting
- B. Ensure the latest content updates are installed
- C. Review any PE files that WildFire determined to be malicious
- D. Run the VDI conversion tool
Answer: C
NEW QUESTION 48
......
Updated Verified PSE-Cortex Q&As - Pass Guarantee: https://examsites.premiumvcedump.com/Palo-Alto-Networks/valid-PSE-Cortex-premium-vce-exam-dumps.html