2022 PSE-Cortex Premium Files Test pdf - Free Dumps Collection
Get ready to pass the PSE-Cortex Exam right now using our Palo Alto Networks Certification Exam Package
NEW QUESTION 14
Which option describes a Load-Balancing Engine Group?
- A. A group of engines that use an algorithm to efficiently share the workload for integrations
- B. A group of engines that ensure High Availability of Demisto backend databases.
- C. A group of engines that use an algorithm to efficiently share the workload for automation scripts
- D. A group of D2 agents that share processing power across multiple endpoints
Answer: C
NEW QUESTION 15
An administrator of a Cortex XDR protected production environment would like to test its ability to protect users from a known flash player exploit.
What is the safest way to do it?
- A. The administrator should use the Cortex XDR tray icon to confirm his corporate laptop is fully protected then open the weaponized flash file on his machine, and monitor the Events tab on the Cortex XDR console.
- B. The administrator should place a copy of the weaponized flash file on several USB drives, scatter them around the office and monitor the Events tab on the Cortex XDR console
- C. The administrator should attach a copy of the weapomzed flash file to an email, send the email to a selected group of employees, and monitor the Events tab on the Cortex XDR console
- D. The administrator should create a non-production Cortex XDR test environment that accurately represents the production environment, introduce the weaponized flash file, and monitor the Events tab on the Cortex XDR console.
Answer: C
NEW QUESTION 16
What are process exceptions used for?
- A. permit processes to load specific DLLs
- B. whitelist programs from WildFire analysis
- C. change the WildFire verdict for a given executable
- D. disable an EPM for a particular process
Answer: B
NEW QUESTION 17
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )
- A. presence of Flash executable
- B. domain/workgroup membership
- C. OS
- D. hostname
- E. alert root cause
Answer: B,C,D
NEW QUESTION 18
Which task allows the playbook to follow different paths based on specific conditions?
- A. Conditional
- B. Manual
- C. Automation
- D. Parallel
Answer: B
NEW QUESTION 19
How does an "inline" auto-extract task affect playbook execution?
- A. step. Wait until the indicators are enriched but doesn't populate context data before executing the next step.
- B. Doesn't wait until the indicators are enriched and continues executing the next step
- C. Wait until the indicators are enriched and populate context data before executing the next step.
- D. Doesn't wait until the indicators are enriched but populate context data before executing the next
Answer: C
NEW QUESTION 20
When analyzing logs for indicators, which are used for only BIOC identification'?
- A. error messages
- B. artifacts
- C. observed activity
- D. techniques
Answer: D
NEW QUESTION 21
An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
- A. Contact support and ask for a security exception.
- B. Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
- C. With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module
- D. In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
Answer: B,D
NEW QUESTION 22
Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?
- A. DEB
- B. RPM
- C. SH
- D. ZIP
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/engines/install-deploy-and-config
NEW QUESTION 23
What is the difference between an exception and an exclusion?
- A. An exception does not exist
- B. An exclusion does not exist
- C. An exception is based on rules and exclusions are on alerts
- D. An exclusion is based on rules and exceptions are based on alerts.
Answer: C
NEW QUESTION 24
In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?
- A. create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group
- B. create a "docker" group and add the "Cortex XSOAR" or "demisto" user to this group
- C. disable the Cortex XSOAR service
- D. enable the docker service
Answer: A
NEW QUESTION 25
The certificate used for decryption was installed as a trusted toot CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console.What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?
- A. enable SSL decryption
- B. disable SSL decryption
- C. add paloaltonetworks.com to the SSL Decryption Exclusion list
- D. reinstall the root CA certificate
Answer: B
NEW QUESTION 26
If an anomalous process is discovered while investigating the cause of a security event, you can take immediate action to terminate the process or the whole process tree, and block processes from running by initiating which Cortex XDR capability?
- A. Live Terminal
- B. Live Sensors
- C. Log Stitching
- D. File Explorer
Answer: A
NEW QUESTION 27
Which two items are stitched to the Cortex XDR causality chain'' (Choose two)
- A. SIEM alert
- B. full URL
- C. firewall alert
- D. registry set value
Answer: C,D
NEW QUESTION 28
An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project's operational considerations'?
- A. SOC manager
- B. endpoint manager
- C. SOC analyst
- D. desktop engineer
Answer: C
NEW QUESTION 29
Which two log types should be configuredfor firewall forwarding to the Cortex Data Lake for use by Cortex XDR?(Choose two)
- A. Correlation
- B. Analytics
- C. HIP
- D. Security Event
Answer: B,D
NEW QUESTION 30
Given the integration configuration and error in the screenshot what is the cause of the problem?
- A. incorrect appliance port
- B. incorrect server URL
- C. incorrect instance name
- D. incorrect Username and Password
Answer: C
NEW QUESTION 31
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?
- A. 100 GB
- B. 1 TB
- C. 10 GB
- D. 10 TB
Answer: B
NEW QUESTION 32
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
- A. Cortex XDR Pro per TB
- B. Cortex XDR Prevent
- C. Cortex XDR Endpoint
- D. Cortex XDR Pro Per Endpoint
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licen
NEW QUESTION 33
......
Master 2022 Latest The Questions Palo Alto Networks Certification and Pass PSE-Cortex Real Exam!: https://www.exam4pdf.com/PSE-Cortex-dumps-torrent.html
A fully updated 2022 PSE-Cortex Exam Dumps exam guide from training expert Exam4PDF: https://drive.google.com/open?id=1wP-kRoz9VGLbTUxcOGDVAcJI3xkIJTI5
