New 2021 PSE-Cortex exam questions Welcome to download the newest TestkingPass PSE-Cortex PDF dumps (60 Q&As)
P.S. Free 2021 Palo Alto Networks Certification PSE-Cortex dumps are available on Google Drive shared by TestkingPass
NEW QUESTION 32
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. not Contains
- B. =>
- C. !*
- D. < >
Answer: A,C
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-cortex-xdr/manage-tables.html
NEW QUESTION 33
If you have a playbook task that errors out. where could you see the output of the task?
- A. /var/log/messages
- B. Demisto Audit log
- C. Playbook Editor
- D. War Room of the incident
Answer: C
NEW QUESTION 34
Which two entities can be created as a BIOC? (Choose two.)
- A. event log
- B. alert log
- C. registry
- D. file
Answer: C,D
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/cortex-xdr-indicators/working-with-biocs/create-a-bioc-rule.html
NEW QUESTION 35
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )
- A. alert root cause
- B. domain/workgroup membership
- C. presence of Flash executable
- D. hostname
- E. OS
Answer: B,D,E
NEW QUESTION 36
Which four types of Traps logs are stored within Cortex Data Lake?
- A. Threat, Config, Authentication, Analytic
- B. Threat, Config, System, Analytic
- C. Threat, Config, System, Data
- D. Threat, Monitor. System, Analytic
Answer: B
NEW QUESTION 37
The prospect is deciding whether to go with a phishing or a ServiceNow use case as part of their POC We have integrations for both but a playbook for phishing only Which use case should be used for the POC?
- A. phishing
- B. either
- C. neither
- D. ServiceNow
Answer: A
NEW QUESTION 38
Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?
- A. Device Customization
- B. Device Control
- C. Agent Management
- D. Agent Configuration
Answer: B
Explanation:
https://live.paloaltonetworks.com/t5/blogs/cortex-xdr-features-introduced-in-december-2019/ba-p/302231
NEW QUESTION 39
How can you view all the relevant incidents for an indicator?
- A. Related Incidents column in Indicator Screen
- B. Linked Indicators column in Incident Screen
- C. Linked Incidents column in Indicator Screen
- D. Related Indicators column in Incident Screen
Answer: B
NEW QUESTION 40
Which two items are stitched to the Cortex XDR causality chain'' (Choose two)
- A. registry set value
- B. SIEM alert
- C. firewall alert
- D. full URL
Answer: A,C
NEW QUESTION 41
Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types? (Choose three.)
- A. Add new fields to an incident type
- B. Define the way that incidents of a specific type are displayed in the system
- C. Drop new incidents of the same type that contain similar information
- D. Set reminders for an incident SLA
- E. Define whether a playbook runs automatically when an incident type is encountered
Answer: B,D,E
NEW QUESTION 42
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. domain
- B. IP
- C. endpoint hostname
- D. registry entry
Answer: A,B
NEW QUESTION 43
Whichfour types of Traps logs are stored within Cortex Data Lake?
- A. Threat, Config, Authentication, Analytic
- B. Threat, Config, System, Analytic
- C. Threat, Config, System,Data
- D. Threat, Monitor. System, Analytic
Answer: C
NEW QUESTION 44
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
- A. Cortex XDR Endpoint
- B. Cortex XDR Pro per TB
- C. Cortex XDR Prevent
- D. Cortex XDR Pro Per Endpoint
Answer: A
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licen
NEW QUESTION 45
A prospect has agreed to do a 30-day POC and asked to integrate with a product that Demisto currently does not have an integration with. How should you respond?
- A. Tell them we can build it with Professional Services.
- B. Agree to build the integration as part of the POC
- C. Extend the POC window to allow the solution architects to build it
- D. Tell them custom integrations are not created as part of the POC
Answer: D
NEW QUESTION 46
Which step is required to prepare the VDI Golden Image?
- A. Review any PE files that WildFire determined to be malicious
- B. Ensure the latest content updates are installed
- C. Set the memory dumps to manual setting
- D. Run the VDI conversion tool
Answer: C
NEW QUESTION 47
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )
- A. domain/workgroup membership
- B. OS
- C. presence of Flash executable
- D. hostname
- E. alert root cause
Answer: A,C,E
NEW QUESTION 48
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)
- A. quarantine status
- B. attack threat intelligence tag
- C. hostname
- D. Domain/workgroup membership
- E. OS
Answer: C,D,E
NEW QUESTION 49
What is the retention requirement for Cortex Data Lake sizing?
- A. number of endpoints
- B. logs per second
- C. number of days
- D. number of VM-Series NGFW
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-corte
NEW QUESTION 50
When a Demisto Engine is part of a Load-Balancing group it?
- A. Can be used separately as an engine, only if connected to the Demisto Server directly
- B. It must have port 443 open to allow the Demisto Server to establish a connection
- C. Must be in a Load-Balancing group with at least another 3 members
- D. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance
Answer: C
NEW QUESTION 51
Rearrange the steps into the correct order for modifying an incident layout.
Answer:
Explanation:
1 - Navigate to Settings > Advanced > Incident Types
2 - Select the incident type you want to customize the layout view for
3 - Edit the layout
4 - Select the Edit Layout option
5 - Navigate to Settings > Layout Builder
NEW QUESTION 52
......
PSE-Cortex exam questions from TestkingPass dumps: https://www.testkingpass.com/PSE-Cortex-testking-dumps.html (60 Q&As)
Free 2021 Palo Alto Networks Certification PSE-Cortex dumps are available on Google Drive shared by TestkingPass: https://drive.google.com/open?id=114Rq0na1poUnIfRXvxtBWOb2EVhf5uhn