Palo Alto Networks PSE-CORTEX Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-CORTEX Online Questions & Answers

• Question 31:

  Cortex XDR can schedule recurring scans of endpoints for malware. Identify two methods for initiating an on-demand malware scan (Choose two )

  A. Response > Action Center
  B. the local console
  C. Telnet
  D. Endpoint > Endpoint Management
  A. Response > Action Center
  C. Telnet

• Question 32:

  How do sub-playbooks affect the Incident Context Data?

  A. When set to private, task outputs do not automatically get written to the root context
  B. When set to private, task outputs automatically get written to the root context
  C. When set to global, allows parallel task execution.
  D. When set to global, sub-playbook tasks do not have access to the root context
  D. When set to global, sub-playbook tasks do not have access to the root context

• Question 33:

  A General Purpose Dynamic Section can be added to which two layouts for incident types? (Choose two)

  A. "Close" Incident Form
  B. Incident Summary
  C. Incident Quick View
  D. "New"/Edit" Incident Form
  B. Incident Summary
  C. Incident Quick View

• Question 34:

  The certificate used for decryption was installed as a trusted root CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?

  A. add paloaltonetworks com to the SSL Decryption Exclusion list
  B. enable SSL decryption
  C. disable SSL decryption
  D. reinstall the root CA certificate
  D. reinstall the root CA certificate

• Question 35:

  Which two filter operators are available in Cortex XDR? (Choose two.)

  A. < >
  B. Contains
  C. =
  D. Is Contained By
  B. Contains
  C. =

• Question 36:

  In the DBotScore context field, which context key would differentiate between multiple entries for the same indicator in a multi-TIP environment?

  A. Vendor
  B. Type
  C. Using
  D. Brand
  A. Vendor

• Question 37:

  Which two entities can be created as a BIOC? (Choose two.)

  A. file
  B. registry
  C. event log
  D. alert log
  A. file
  B. registry

• Question 38:

  Given the integration configuration and error in the screenshot what is the cause of the problem? [missing the exhibits]

  A. incorrect instance name
  B. incorrect Username and Password
  C. incorrect appliance port
  D. incorrect server URL
  A. incorrect instance name

• Question 39:

  Which option describes a Load-Balancing Engine Group?

  A. A group of engines that use an algorithm to efficiently share the workload for integrations
  B. A group of engines that ensure High Availability of Demisto backend databases.
  C. A group of engines that use an algorithm to efficiently share the workload for automation scripts
  D. A group of D2 agents that share processing power across multiple endpoints
  C. A group of engines that use an algorithm to efficiently share the workload for automation scripts

• Question 40:

  How many use cases should a POC success criteria document include?

  A. only 1
  B. 3 or more
  C. no more than 5
  D. no more than 2
  D. no more than 2