Palo Alto Networks System Engineer - Cortex Professional (PSE-Cortex) Practice Test

Questions # 21:

Which Cortex XDR capability extends investigations to an endpoint?

Options:

Log Stitching

Causality Chain

Sensors

Live Terminal

Questions # 22:

Which command-line interface (CLI) query would retrieve the last three Splunk events?

Options:

!search using=splunk_instance_1 query="* | last 3"

!search using=splunk_instance_1 query="* | 3"

!query using=splunk_instance_1 query="* | last 3"

!search using=splunk_instance_1 query="* | head 3"

Questions # 23:

What are two ways a customer can configure user authentication access Cortex Xpanse? (Choose two.)

Options:

Secure Shell (SSH)

SAML

RADIUS

Customer Support Portal

Questions # 24:

What is a benefit offered by Cortex XSOAR?

Options:

It provides advanced customization capabilities.

It provides real-time protection across hosts and containers.

It enables consolidation of multiple point products into a single integrated service.

It enables a comprehensive view of the customer environment with regard to digital employee productivity.

Questions # 25:

Which two actions are required to add indicators to the whitelist? (Choose two.)

Options:

Click "New Whitelisted Indicator" in the Whitelist page.

Upload an external file named "whitelist" to the Whitelist page.

Upload an external file named "whitelist" to the Indicators page.

Select the indicators and click "Delete and Whitelist" in the Indicators page.

Questions # 26:

What method does the Traps agent use to identify malware during a scheduled scan?

Options:

Heuristic analysis

Local analysis

Signature comparison

WildFire hash comparison and dynamic analysis

Questions # 27:

Which command is used to add Cortex XSOAR "User1" to an investigation from the War Room command-line interface (CLI)?

Options:

/invite User1

#User1

@User1

!invite User1

Questions # 28:

Which statement applies to the malware protection flow in Cortex XDR Prevent?

Options:

Local static analysis happens before a WildFire verdict check.

In the final step, the block list is verified.

A trusted signed file is exempt from local static analysis.

Hash comparisons come after local static analysis.

Questions # 29:

"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?

Options:

#Bob

/invite Bob

@Bob

!invite Bob

Questions # 30:

How many use cases should a POC success criteria document include?

Options:

only 1

3 or more

no more than 5

no more than 2

Viewing page 3 out of 5 pages

Viewing questions 21-30 out of questions

Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the Paloalto Networks PSE-Cortex Professional PSE-Cortex Questions and answers with ExamsMirror

Exam PSE-Cortex Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

TOP CODES