Ultimate Guide to Prepare PSE-Cortex Certification Exam for Palo Alto Networks Certification in 2021
Use Real PSE-Cortex Dumps - Palo Alto Networks Correct Answers updated on 2021
NEW QUESTION 14
When a Demisto Engine is part of a Load-Balancing group it?
- A. Can be used separately as an engine, only if connected to the Demisto Server directly
- B. It must have port 443 open to allow the Demisto Server to establish a connection
- C. Must be in a Load-Balancing group with at least another 3 members
- D. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance
Answer: C
NEW QUESTION 15
Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?
- A. DEB
- B. SH
- C. ZIP
- D. RPM
Answer: C
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/engines/install-deploy-and-configure-demisto-engines/create-a-new-engine.html
NEW QUESTION 16
Which step is required to prepare the VDI Golden Image?
- A. Ensure the latest content updates are installed
- B. Set the memory dumps to manual setting
- C. Review any PE files that WildFire determined to be malicious
- D. Run the VDI conversion tool
Answer: C
NEW QUESTION 17
Which two entities can be created as a BIOC? (Choose two.)
- A. event log
- B. alert log
- C. registry
- D. file
Answer: C,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/cortex-xd
NEW QUESTION 18
If you have a playbook task that errors out. where could you see the output of the task?
- A. War Room of the incident
- B. /var/log/messages
- C. Demisto Audit log
- D. Playbook Editor
Answer: A
NEW QUESTION 19
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
- A. Cortex XDR Endpoint
- B. Cortex XDR Pro per TB
- C. Cortex XDR Prevent
- D. Cortex XDR Pro Per Endpoint
Answer: A
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licen
NEW QUESTION 20
What is the retention requirement for Cortex Data Lake sizing?
- A. number of endpoints
- B. logs per second
- C. number of days
- D. number of VM-Series NGFW
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-corte
NEW QUESTION 21
The certificate used for decryption was installed as a trusted toot CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console. What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?
- A. enable SSL decryption
- B. disable SSL decryption
- C. add paloaltonetworks.com to the SSL Decryption Exclusion list
- D. reinstall the root CA certificate
Answer: D
NEW QUESTION 22
An administrator has a critical group of systems running Windows XP SP3 that cannot be upgraded The administrator wants to evaluate the ability of Traps to protect these systems and the word processing applications running on them How should an administrator perform this evaluation?
- A. Run a known 2015 flash exploit on a Windows XP SP3 VM. and run an exploitation tool that acts as a listener Use the results to demonstrate Traps capabilities
- B. Gather information about the word processing applications and run them on a Windows XP SP3 VM Determine if any of the applications are vulnerable and run the exploit with an exploitation tool
- C. Prepare the latest version of Windows VM Gather information about the word processing applications, determine if some of them are vulnerable and prepare a working exploit for at least one of them Execute with an exploitation tool
- D. Run word processing exploits in a latest version of Windows VM in a controlled and isolated environment. Document indicators of compromise and compare to Traps protection capabilities
Answer: A
NEW QUESTION 23
Which option is required to prepare the VDI Golden Image?
- A. Use the Cortex XDR VDI tool to obtain verdicts for all PE files
- B. Install the Cortex XOR Agent on the local machine
- C. Configure the Golden Image as a persistent VDI
- D. Run the Cortex VDI conversion tool
Answer: A
NEW QUESTION 24
An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project's operational considerations'?
- A. endpoint manager
- B. SOC manager
- C. SOC analyst
- D. desktop engineer
Answer: C
NEW QUESTION 25
Which two entities can be created as a BIOC? (Choose two.)
- A. event log
- B. alert log
- C. registry
- D. file
Answer: C,D
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/cortex-xdr-indicators/working-with-biocs/create-a-bioc-rule.html
NEW QUESTION 26
When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?
- A. Cortex XSOAR TA App for Splunk
- B. splunk-get-alerts integration command
- C. SplunkSearch automation
- D. SplunkGO integration
Answer: B
NEW QUESTION 27
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
- A. hc-xnet50.traps.paloaltonetworks.com
- B. cc.xnet50traps.paloaltonetworks.com
- C. xnettraps.paloaltonetworks.com
- D. cc-xnet50.traps.paloaltonetworks.com
- E. ch-xnet.traps.paloaltonetworks.com
- F. cc-xnet.traps.paloaltonetworks.com
Answer: D,E,F
NEW QUESTION 28
Rearrange the steps into the correct order for modifying an incident layout.
Answer:
Explanation:
NEW QUESTION 29
Which option describes a Load-Balancing Engine Group?
- A. A group of engines that use an algorithm to efficiently share the workload for automation scripts
- B. A group of engines that ensure High Availability of Demisto backend databases.
- C. A group of engines that use an algorithm to efficiently share the workload for integrations
- D. A group of D2 agents that share processing power across multiple endpoints
Answer: A
NEW QUESTION 30
Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?
- A. Device Customization
- B. Device Control
- C. Agent Management
- D. Agent Configuration
Answer: B
Explanation:
Explanation
https://live.paloaltonetworks.com/t5/blogs/cortex-xdr-features-introduced-in-december-2019/ba-p/302231
NEW QUESTION 31
How do sub-playbooks affect the Incident Context Data?
- A. When set to global, allows parallel task execution.
- B. When set to private, task outputs automatically get written to the root context
- C. When set to global, sub-playbook tasks do not have access to the root context
- D. When set to private, task outputs do not automatically get written to the root context
Answer: C
NEW QUESTION 32
An adversary is attempting to communicate with malware running on your network for the purpose of controlling malware activities or for ex filtrating data from your network. Which Cortex XDR Analytics alert is this activity most likely to trigger'?
- A. Malware
- B. DNS Tunneling
- C. New Administrative Behavior
- D. Uncommon Local Scheduled Task Creation
Answer: A
NEW QUESTION 33
What is the retention requirement for Cortex Data Lake sizing?
- A. number of endpoints
- B. logs per second
- C. number of days
- D. number of VM-Series NGFW
Answer: C
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-cortex-data-lake/set-log-storage-quota
NEW QUESTION 34
......
Palo Alto Networks Certification -PSE-Cortex Exam-Practice-Dumps: https://www.lead1pass.com/Palo-Alto-Networks/PSE-Cortex-practice-exam-dumps.html
PSE-Cortex Premium Files Test pdf - Free Dumps Collection: https://drive.google.com/open?id=1fxFkX9hZsrbimJItJa5TSL7LhL-9muAQ