May-2024 Pass Your PSE-Cortex Exam at the First Try with 100% Real Exam
Get Real Exam Questions for PSE-Cortex with New Questions
The PSE-Cortex certification exam is a comprehensive test that assesses a candidate's knowledge and skills in Cortex technology. It is a valuable credential for professionals who work with Cortex technology and want to demonstrate their expertise. Palo Alto Networks System Engineer - Cortex Professional certification is recognized globally, and it is a valuable asset for professionals who want to advance their careers in cybersecurity.
Palo Alto Networks PSE-Cortex certification is a valuable credential for IT professionals who work with the Cortex platform. Palo Alto Networks System Engineer - Cortex Professional certification validates the candidate's knowledge and expertise in the latest technologies and best practices related to the Cortex product suite. The PSE-Cortex certification also demonstrates the candidate's commitment to their profession and their dedication to staying up-to-date with the latest trends and developments in the cybersecurity industry.
The PSE-Cortex exam is a comprehensive test that covers a wide range of topics, including endpoint security, network security, cloud security, threat intelligence, and incident response. PSE-Cortex exam consists of multiple-choice questions and simulations that test the candidate's ability to implement security solutions in a real-world scenario.
NEW QUESTION # 24
Which task allows the playbook to follow different paths based on specific conditions?
- A. Manual
- B. Automation
- C. Parallel
- D. Conditional
Answer: A
NEW QUESTION # 25
Cortex XDR can schedule recurring scans of endpoints for malware. Identify two methods for initiating an on-demand malware scan (Choose two )
- A. Telnet
- B. the local console
- C. Endpoint > Endpoint Management
- D. Response > Action Center
Answer: C,D
NEW QUESTION # 26
In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?
- A. create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group
- B. create a "docker" group and add the "Cortex XSOAR" or "demisto" user to this group
- C. disable the Cortex XSOAR service
- D. enable the docker service
Answer: A
NEW QUESTION # 27
Which Cortex XDR capability extends investigations to an endpoint?
- A. Live Terminal
- B. Log Stitching
- C. Sensors
- D. Causality Chain
Answer: B
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-concepts
NEW QUESTION # 28
The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.) SUCCESS
- A. The modified script attempted to access a dictionary key that did not exist in the dictionary named
"data" - B. The dictionary was defined incorrectly in the second script.
- C. The modified script required a different parameter to run successfully.
- D. The modified scnpt was run in the wrong Docker image
Answer: D
NEW QUESTION # 29
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
- A. Cortex XDR Endpoint
- B. Cortex XDR Prevent
- C. Cortex XDR Pro Per Endpoint
- D. Cortex XDR Pro per TB
Answer: C
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licenses/migrate-your-cortex-xdr-license
NEW QUESTION # 30
Which option describes a Load-Balancing Engine Group?
- A. A group of engines that use an algorithm to efficiently share the workload for integrations
- B. A group of engines that ensure High Availability of Demisto backend databases.
- C. A group of D2 agents that share processing power across multiple endpoints
- D. A group of engines that use an algorithm to efficiently share the workload for automation scripts
Answer: D
NEW QUESTION # 31
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. =>
- B. !*
- C. < >
- D. not Contains
Answer: B,D
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-cortex-xdr/manage-tables.html
NEW QUESTION # 32
When a Demisto Engine is part of a Load-Balancing group it?
- A. Must be in a Load-Balancing group with at least another 3 members
- B. It must have port 443 open to allow the Demisto Server to establish a connection
- C. Can be used separately as an engine, only if connected to the Demisto Server directly
- D. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance
Answer: D
NEW QUESTION # 33
A General Purpose Dynamic Section can be added to which two layouts for incident types? (Choose two)
- A. "Close" Incident Form
- B. "New"/Edit" Incident Form
- C. Incident Quick View
- D. Incident Summary
Answer: C,D
NEW QUESTION # 34
How do sub-playbooks affect the Incident Context Data?
- A. When set to global, allows parallel task execution.
- B. When set to private, task outputs automatically get written to the root context
- C. When set to global, sub-playbook tasks do not have access to the root context
- D. When set to private, task outputs do not automatically get written to the root context
Answer: D
NEW QUESTION # 35
Given the integration configuration and error in the screenshot what is the cause of the problem?
- A. incorrect instance name
- B. incorrect Username and Password
- C. incorrect server URL
- D. incorrect appliance port
Answer: A
NEW QUESTION # 36
Given the integration configuration and error in the screenshot what is the cause of the problem?
- A. incorrect server URL
- B. incorrect Username and Password
- C. incorrect appliance port
- D. incorrect instance name
Answer: B
NEW QUESTION # 37
A test for a Microsoft exploit has been planned. After some research Internet Explorer 11 CVE-2016-0189 has been selected and a module in Metasploit has been identified (exploit/windows/browser/ms16_051_vbscript) The description and current configuration of the exploit are as follows;
What is the remaining configuration?
A)
B)
C)
D)
- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: D
NEW QUESTION # 38
Whichfour types of Traps logs are stored within Cortex Data Lake?
- A. Threat, Config, System, Analytic
- B. Threat, Config, Authentication, Analytic
- C. Threat, Config, System,Data
- D. Threat, Monitor. System, Analytic
Answer: C
NEW QUESTION # 39
An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
- A. With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module
- B. In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
- C. Contact support and ask for a security exception.
- D. Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
Answer: C
NEW QUESTION # 40
......
Updated PSE-Cortex Certification Exam Sample Questions: https://exam-labs.prep4sureguide.com/PSE-Cortex-prep4sure-exam-guide.html