[Aug-2022] Updated and Accurate PSE-Cortex Questions & Answers for passing the exam Quickly
Download Real PSE-Cortex Exam Dumps for candidates. 100% Free Dump Files
NEW QUESTION 32
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. domain
- B. IP
- C. registry entry
- D. endpoint hostname
Answer: A,B
NEW QUESTION 33
How can you view all the relevant incidents for an indicator?
- A. Related Indicators column in Incident Screen
- B. Linked Incidents column in Indicator Screen
- C. Related Incidents column in Indicator Screen
- D. Linked Indicators column in Incident Screen
Answer: D
NEW QUESTION 34
How many use cases should a POC success criteria document include?
- A. 3 or more
- B. no more than 2
- C. only 1
- D. no more than 5
Answer: B
NEW QUESTION 35
Rearrange the steps into the correct order for modifying an incident layout.
Answer:
Explanation:
1 - Navigate to Settings > Advanced > Incident Types
2 - Select the incident type you want to customize the layout view for
3 - Edit the layout
4 - Select the Edit Layout option
5 - Navigate to Settings > Layout Builder
NEW QUESTION 36
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
- A. Cortex XDR Pro Per Endpoint
- B. Cortex XDR Prevent
- C. Cortex XDR Endpoint
- D. Cortex XDR Pro per TB
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licen
NEW QUESTION 37
If you have a playbook task that errors out. where could you see the output of the task?
- A. Demisto Audit log
- B. /var/log/messages
- C. Playbook Editor
- D. War Room of the incident
Answer: C
NEW QUESTION 38
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
- A. Cortex XDR Pro Per Endpoint
- B. Cortex XDR Endpoint
- C. Cortex XDR Prevent
- D. Cortex XDR Pro per TB
Answer: A
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licenses/migrate-your-cortex-xdr-license
NEW QUESTION 39
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )
- A. presence of Flash executable
- B. alert root cause
- C. domain/workgroup membership
- D. hostname
- E. OS
Answer: A,B,C
NEW QUESTION 40
A test for a Microsoft exploit has been planned. After some research Internet Explorer 11 CVE-2016-0189 has been selected and a module in Metasploit has been identified (exploit/windows/browser/ms16_051_vbscript) The description and current configuration of the exploit are as follows;
What is the remaining configuration?
A)
B)
C)
D)
- A. Option B
- B. Option A
- C. Option D
- D. Option C
Answer: C
NEW QUESTION 41
An EDR project was initiated by a CISO. Which resource will likely have the most heavy influence on the project?
- A. SOC analyst IT
- B. SOC manager
- C. desktop engineer
- D. operations manager
Answer: B
NEW QUESTION 42
When a Demisto Engine is part of a Load-Balancing group it?
- A. Must be in a Load-Balancing group with at least another 3 members
- B. It must have port 443 open to allow the Demisto Server to establish a connection
- C. Can be used separately as an engine, only if connected to the Demisto Server directly
- D. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance
Answer: A
NEW QUESTION 43
Which two entities can be created as a BIOC? (Choose two.)
- A. event log
- B. alert log
- C. registry
- D. file
Answer: C,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/cortex-xd
NEW QUESTION 44
What are process exceptions used for?
- A. whitelist programs from WildFire analysis
- B. disable an EPM for a particular process
- C. change the WildFire verdict for a given executable
- D. permit processes to load specific DLLs
Answer: A
NEW QUESTION 45
Rearrange the steps into the correct order for modifying an incident layout.
Answer:
Explanation:
NEW QUESTION 46
What are process exceptions used for?
- A. disable an EPM for a particular process
- B. change the WildFire verdict for a given executable
- C. permit processes to load specific DLLs
- D. whitelist programs from WildFire analysis
Answer: A
NEW QUESTION 47
The prospect is deciding whether to go with a phishing or a ServiceNow use case as part of their POC We have integrations for both but a playbook for phishing only Which use case should be used for the POC?
- A. phishing
- B. ServiceNow
- C. either
- D. neither
Answer: A
NEW QUESTION 48
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
- A. cc-xnet50.traps.paloaltonetworks.com
- B. cc-xnet.traps.paloaltonetworks.com
- C. ch-xnet.traps.paloaltonetworks.com
- D. cc.xnet50traps.paloaltonetworks.com
- E. xnettraps.paloaltonetworks.com
- F. hc-xnet50.traps.paloaltonetworks.com
Answer: A,B,C
NEW QUESTION 49
In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?
- A. create a "docker" group and add the "Cortex XSOAR" or "demisto" user to this group
- B. enable the docker service
- C. disable the Cortex XSOAR service
- D. create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group
Answer: A
NEW QUESTION 50
......
Prepare Important Exam with PSE-Cortex Exam Dumps: https://www.prep4sureguide.com/PSE-Cortex-prep4sure-exam-guide.html
Pass Exam Questions Efficiently With PSE-Cortex Questions: https://drive.google.com/open?id=1ax27g37PhzGI2DFYKtczkY0o2bREtcOh