Palo Alto Networks PSE-CORTEX Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-CORTEX Online Questions & Answers

• Question 1:

  The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?

  A. Cortex XDR Pro per TB
  B. Cortex XDR Prevent
  C. Cortex XDR Endpoint
  D. Cortex XDR Pro Per Endpoint
  C. Cortex XDR Endpoint

• Question 2:

  Which step is required to prepare the VDI Golden Image?

  A. Review any PE files that WildFire determined to be malicious
  B. Ensure the latest content updates are installed
  C. Run the VDI conversion tool
  D. Set the memory dumps to manual setting
  D. Set the memory dumps to manual setting

• Question 3:

  If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.

  Palo Alto Networks will provide the customer with a free instance

  What size is this free Cortex Data Lake instance?

  A. 1 TB
  B. 10 GB
  C. 100 GB D. 10 TB
  A. 1 TB

• Question 4:

  How does an "inline" auto-extract task affect playbook execution?

  A. Doesn't wait until the indicators are enriched and continues executing the next step
  B. Doesn't wait until the indicators are enriched but populate context data before executing the next
  C. step. Wait until the indicators are enriched but doesn't populate context data before executing the next step.
  D. Wait until the indicators are enriched and populate context data before executing the next step.
  D. Wait until the indicators are enriched and populate context data before executing the next step.

• Question 5:

  When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?

  A. splunk-get-alerts integration command
  B. Cortex XSOAR TA App for Splunk
  C. SplunkSearch automation
  D. SplunkGO integration
  A. splunk-get-alerts integration command

• Question 6:

  Which option is required to prepare the VDI Golden Image?

  A. Configure the Golden Image as a persistent VDI
  B. Use the Cortex XDR VDI tool to obtain verdicts for all PE files
  C. Install the Cortex XOR Agent on the local machine
  D. Run the Cortex VDI conversion tool
  D. Run the Cortex VDI conversion tool

• Question 7:

  Whichfour types of Traps logs are stored within Cortex Data Lake?

  A. Threat, Config, System,Data
  B. Threat, Config, System, Analytic
  C. Threat, Monitor. System, Analytic
  D. Threat, Config, Authentication, Analytic
  A. Threat, Config, System,Data

• Question 8:

  The certificate used for decryption was installed as a trusted toot CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console.What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?

  A. add paloaltonetworks.com to the SSL Decryption Exclusion list
  B. enable SSL decryption
  C. disable SSL decryption
  D. reinstall the root CA certificate
  C. disable SSL decryption

• Question 9:

  Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?

  A. Agent Configuration
  B. Device Control
  C. Device Customization
  D. Agent Management
  B. Device Control

• Question 10:

  Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)

  A. IP
  B. endpoint hostname
  C. domain
  D. registry entry
  B. endpoint hostname
  D. registry entry