Certification Training for PSE-Cortex Exam Dumps Test Engine [2021]
Aug 28, 2021 Step by Step Guide to Prepare for PSE-Cortex Exam
NEW QUESTION 14
Which step is required to prepare the VDI Golden Image?
- A. Ensure the latest content updates are installed
- B. Review any PE files that WildFire determined to be malicious
- C. Set the memory dumps to manual setting
- D. Run the VDI conversion tool
Answer: C
NEW QUESTION 15
How do sub-playbooks affect the Incident Context Data?
- A. When set to global, sub-playbook tasks do not have access to the root context
- B. When set to private, task outputs automatically get written to the root context
- C. When set to global, allows parallel task execution.
- D. When set to private, task outputs do not automatically get written to the root context
Answer: D
NEW QUESTION 16
Rearrange the steps into the correct order for modifying an incident layout.
Answer:
Explanation:
1 - Navigate to Settings > Advanced > Incident Types
2 - Select the incident type you want to customize the layout view for
3 - Edit the layout
4 - Select the Edit Layout option
5 - Navigate to Settings > Layout Builder
NEW QUESTION 17
When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?
- A. SplunkGO integration
- B. SplunkSearch automation
- C. Cortex XSOAR TA App for Splunk
- D. splunk-get-alerts integration command
Answer: D
NEW QUESTION 18
Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types?
(Choose three.)
- A. Add new fields to an incident type
- B. Set reminders for an incident SLA
- C. Define whether a playbook runs automatically when an incident type is encountered
- D. Define the way that incidents of a specific type are displayed in the system
- E. Drop new incidents of the same type that contain similar information
Answer: C,D,E
NEW QUESTION 19
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. =>
- B. not Contains
- C. < >
- D. !*
Answer: B,D
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-cortex-xdr/manage-tables.html
NEW QUESTION 20
Cortex XDR can schedule recurring scans of endpoints for malware. Identify two methods for initiating an on-demand malware scan (Choose two )
- A. the local console
- B. Telnet
- C. Response > Action Center
- D. Endpoint > Endpoint Management
Answer: B,C
NEW QUESTION 21
A prospect has agreed to do a 30-day POC and asked to integrate with a product that Demisto currently does not have an integration with. How should you respond?
- A. Tell them custom integrations are not created as part of the POC
- B. Tell them we can build it with Professional Services.
- C. Agree to build the integration as part of the POC
- D. Extend the POC window to allow the solution architects to build it
Answer: A
NEW QUESTION 22
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. endpoint hostname
- B. domain
- C. IP
- D. registry entry
Answer: B,C
NEW QUESTION 23
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)
- A. hostname
- B. OS
- C. quarantine status
- D. attack threat intelligence tag
- E. Domain/workgroup membership
Answer: A,B,E
NEW QUESTION 24
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?
- A. 100 GB
- B. 10 TB
- C. 10 GB
- D. 1 TB
Answer: A
NEW QUESTION 25
When a Demisto Engine is part of a Load-Balancing group it?
- A. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance
- B. It must have port 443 open to allow the Demisto Server to establish a connection
- C. Can be used separately as an engine, only if connected to the Demisto Server directly
- D. Must be in a Load-Balancing group with at least another 3 members
Answer: D
NEW QUESTION 26
In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?
- A. enable the docker service
- B. create a "docker" group and add the "Cortex XSOAR" or "demisto" user to this group
- C. disable the Cortex XSOAR service
- D. create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group
Answer: B
NEW QUESTION 27
Which option is required to prepare the VDI Golden Image?
- A. Install the Cortex XOR Agent on the local machine
- B. Run the Cortex VDI conversion tool
- C. Use the Cortex XDR VDI tool to obtain verdicts for all PE files
- D. Configure the Golden Image as a persistent VDI
Answer: B
NEW QUESTION 28
How many use cases should a POC success criteria document include?
- A. no more than 5
- B. 3 or more
- C. no more than 2
- D. only 1
Answer: D
NEW QUESTION 29
How does an "inline" auto-extract task affect playbook execution?
- A. Wait until the indicators are enriched and populate context data before executing the next step.
- B. Doesn't wait until the indicators are enriched but populate context data before executing the next
- C. step. Wait until the indicators are enriched but doesn't populate context data before executing the next step.
- D. Doesn't wait until the indicators are enriched and continues executing the next step
Answer: A
NEW QUESTION 30
......
Ultimate Guide to Prepare PSE-Cortex Certification Exam for Palo Alto Networks Certification: https://www.vceengine.com/PSE-Cortex-vce-test-engine.html
Palo Alto Networks Certification PSE-Cortex Real Exam Questions and Answers FREE Updated: https://drive.google.com/open?id=1jSBXnMvrlPpEyfYqQWVRrh9hJ-WaikZE
