[Dec-2021] Latest PSE-Cortex Exam Dumps for Pass Guaranteed
Reliable Palo Alto Networks Certification PSE-Cortex Dumps PDF Dec 08, 2021 Recently Updated Questions
NEW QUESTION 11
An adversary is attempting to communicate with malware running on your network for the purpose of controlling malware activities or for ex filtrating data from your network. Which Cortex XDR Analytics alert is this activity most likely to trigger'?
- A. DNS Tunneling
- B. Uncommon Local Scheduled Task Creation
- C. Malware
- D. New Administrative Behavior
Answer: C
NEW QUESTION 12
Which Cortex XDR capability extends investigations to an endpoint?
- A. Sensors
- B. Causality Chain
- C. Log Stitching
- D. Live Terminal
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-conc
NEW QUESTION 13
Which CLI query would bring back Notable Events from Splunk?
A)
B)
C)
D)
- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: D
NEW QUESTION 14
Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types? (Choose three.)
- A. Define whether a playbook runs automatically when an incident type is encountered
- B. Set reminders for an incident SLA
- C. Add new fields to an incident type
- D. Drop new incidents of the same type that contain similar information
- E. Define the way that incidents of a specific type are displayed in the system
Answer: A,B,E
NEW QUESTION 15
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
- A. Cortex XDR Pro Per Endpoint
- B. Cortex XDR Pro per TB
- C. Cortex XDR Prevent
- D. Cortex XDR Endpoint
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licen
NEW QUESTION 16
Given the integration configuration and error in the screenshot what is the cause of the problem?
- A. incorrect instance name
- B. incorrect appliance port
- C. incorrect server URL
- D. incorrect Username and Password
Answer: A
NEW QUESTION 17
"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?
- A. !invite Bob
- B. #Bob
- C. @Bob
- D. /invite Bob
Answer: B
NEW QUESTION 18
A test for a Microsoft exploit has been planned. After some research Internet Explorer 11 CVE-2016-0189 has been selected and a module in Metasploit has been identified (exploit/windows/browser/ms16_051_vbscript) The description and current configuration of the exploit are as follows;
What is the remaining configuration?
A)
B)
C)
D)
- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: D
NEW QUESTION 19
The prospect is deciding whether to go with a phishing or a ServiceNow use case as part of their POC We have integrations for both but a playbook for phishing only Which use case should be used for the POC?
- A. either
- B. ServiceNow
- C. neither
- D. phishing
Answer: D
NEW QUESTION 20
Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?
- A. RPM
- B. DEB
- C. ZIP
- D. SH
Answer: C
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/engines/install-deploy-and-configure-demisto-engines/create-a-new-engine.html
NEW QUESTION 21
Which option is required to prepare the VDI Golden Image?
- A. Run the Cortex VDI conversion tool
- B. Configure the Golden Image as a persistent VDI
- C. Use the Cortex XDR VDI tool to obtain verdicts for all PE files
- D. Install the Cortex XOR Agent on the local machine
Answer: C
NEW QUESTION 22
Given the integration configuration and error in the screenshot what is the cause of the problem?
- A. incorrect Username and Password
- B. incorrect appliance port
- C. incorrect server URL
- D. incorrect instance name
Answer: A
NEW QUESTION 23
An EDR project was initiated by a CISO. Which resource will likely have the most heavy influence on the project?
- A. SOC manager
- B. desktop engineer
- C. operations manager
- D. SOC analyst IT
Answer: A
NEW QUESTION 24
Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types?
(Choose three.)
- A. Drop new incidents of the same type that contain similar information
- B. Define whether a playbook runs automatically when an incident type is encountered
- C. Add new fields to an incident type
- D. Set reminders for an incident SLA
- E. Define the way that incidents of a specific type are displayed in the system
Answer: A,B,E
NEW QUESTION 25
When a Demisto Engine is part of a Load-Balancing group it?
- A. It must have port 443 open to allow the Demisto Server to establish a connection
- B. Can be used separately as an engine, only if connected to the Demisto Server directly
- C. Must be in a Load-Balancing group with at least another 3 members
- D. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance
Answer: C
NEW QUESTION 26
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )
- A. hostname
- B. presence of Flash executable
- C. OS
- D. alert root cause
- E. domain/workgroup membership
Answer: B,D,E
NEW QUESTION 27
......
Latest 2021 Realistic Verified PSE-Cortex Dumps: https://www.exam-killer.com/PSE-Cortex-valid-questions.html
Pass Your Palo Alto Networks PSE-Cortex Exam with Correct 60 Questions and Answers: https://drive.google.com/open?id=1vomFjObUidI3WEic3UdesKR0FBF0Oqwa
