[Dec-2021] Palo Alto Networks PSE-Cortex Dumps – Reduce Your Chance of Failure in PSE-Cortex Exam
To help you achieve your ultimate goal, we suggest the actual Palo Alto Networks PSE-Cortex dumps for your Palo Alto Networks System Engineer - Cortex Professional exam preparation to use as your guideline.
NEW QUESTION 19
Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types?
(Choose three.)
- A. Drop new incidents of the same type that contain similar information
- B. Define whether a playbook runs automatically when an incident type is encountered
- C. Add new fields to an incident type
- D. Set reminders for an incident SLA
- E. Define the way that incidents of a specific type are displayed in the system
Answer: A,B,E
NEW QUESTION 20
Which two log types should be configuredfor firewall forwarding to the Cortex Data Lake for use by Cortex XDR?(Choose two)
- A. Correlation
- B. Security Event
- C. Analytics
- D. HIP
Answer: B,C
NEW QUESTION 21
The certificate used for decryption was installed as a trusted toot CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console. What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?
- A. enable SSL decryption
- B. reinstall the root CA certificate
- C. add paloaltonetworks.com to the SSL Decryption Exclusion list
- D. disable SSL decryption
Answer: B
NEW QUESTION 22
Which two formats are supported by Whitelist? (Choose two)
- A. Regex
- B. STIX
- C. CIDR
- D. CSV
Answer: C,D
NEW QUESTION 23
In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?
- A. create a "docker" group and add the "Cortex XSOAR" or "demisto" user to this group
- B. disable the Cortex XSOAR service
- C. enable the docker service
- D. create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group
Answer: A
NEW QUESTION 24
Rearrange the steps into the correct order for modifying an incident layout.
Answer:
Explanation:
1 - Navigate to Settings > Advanced > Incident Types
2 - Select the incident type you want to customize the layout view for
3 - Edit the layout
4 - Select the Edit Layout option
5 - Navigate to Settings > Layout Builder
NEW QUESTION 25
Which CLI query would bring back Notable Events from Splunk?
A)
B)
C)
D)
- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: D
NEW QUESTION 26
If you have a playbook task that errors out. where could you see the output of the task?
- A. War Room of the incident
- B. Playbook Editor
- C. /var/log/messages
- D. Demisto Audit log
Answer: B
NEW QUESTION 27
An administrator has a critical group of systems running Windows XP SP3 that cannot be upgraded The administrator wants to evaluate the ability of Traps to protect these systems and the word processing applications running on them How should an administrator perform this evaluation?
- A. Prepare the latest version of Windows VM Gather information about the word processing applications, determine if some of them are vulnerable and prepare a working exploit for at least one of them Execute with an exploitation tool
- B. Run a known 2015 flash exploit on a Windows XP SP3 VM. and run an exploitation tool that acts as a listener Use the results to demonstrate Traps capabilities
- C. Run word processing exploits in a latest version of Windows VM in a controlled and isolated environment. Document indicators of compromise and compare to Traps protection capabilities
- D. Gather information about the word processing applications and run them on a Windows XP SP3 VM Determine if any of the applications are vulnerable and run the exploit with an exploitation tool
Answer: B
NEW QUESTION 28
The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.) SUCCESS
- A. The modified script attempted to access a dictionary key that did not exist in the dictionary named "data"
- B. The modified scnpt was run in the wrong Docker image
- C. The modified script required a different parameter to run successfully.
- D. The dictionary was defined incorrectly in the second script.
Answer: B
NEW QUESTION 29
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
- A. xnettraps.paloaltonetworks.com
- B. cc-xnet50.traps.paloaltonetworks.com
- C. ch-xnet.traps.paloaltonetworks.com
- D. cc-xnet.traps.paloaltonetworks.com
- E. cc.xnet50traps.paloaltonetworks.com
- F. hc-xnet50.traps.paloaltonetworks.com
Answer: B,C,D
NEW QUESTION 30
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )
- A. hostname
- B. presence of Flash executable
- C. OS
- D. alert root cause
- E. domain/workgroup membership
Answer: B,D,E
NEW QUESTION 31
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?
- A. 10 TB
- B. 100 GB
- C. 10 GB
- D. 1 TB
Answer: B
NEW QUESTION 32
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. registry entry
- B. IP
- C. domain
- D. endpoint hostname
Answer: A,D
NEW QUESTION 33
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. not Contains
- B. !*
- C. < >
- D. =>
Answer: A,B
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-c
NEW QUESTION 34
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. Contains
- B. < >
- C. =
- D. Is Contained By
Answer: A,C
NEW QUESTION 35
......
100% Free PSE-Cortex Demo-Trial [Pdf], get it now: https://drive.google.com/open?id=1N0SIENB3j0kQdpP6XvexwOUzHBPzvt4m
Accurate & Verified Answers As Seen in the Real Exam here: https://www.fast2test.com/PSE-Cortex-premium-file.html