Free 365 Days Exam Updates PSE-Cortex dumps with test Engine Practice
Updated Verified PSE-Cortex dumps Q&As - 100% Pass Guaranteed
NEW QUESTION # 25
A prospect has agreed to do a 30-day POC and asked to integrate with a product that Demisto currently does not have an integration with. How should you respond?
- A. Tell them we can build it with Professional Services.
- B. Extend the POC window to allow the solution architects to build it
- C. Agree to build the integration as part of the POC
- D. Tell them custom integrations are not created as part of the POC
Answer: D
NEW QUESTION # 26
Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types? (Choose three.)
- A. Add new fields to an incident type
- B. Define the way that incidents of a specific type are displayed in the system
- C. Define whether a playbook runs automatically when an incident type is encountered
- D. Drop new incidents of the same type that contain similar information
- E. Set reminders for an incident SLA
Answer: B,C,E
NEW QUESTION # 27
An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project's operational considerations'?
- A. SOC manager
- B. desktop engineer
- C. SOC analyst
- D. endpoint manager
Answer: C
NEW QUESTION # 28
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
- A. hc-xnet50.traps.paloaltonetworks.com
- B. xnettraps.paloaltonetworks.com
- C. cc.xnet50traps.paloaltonetworks.com
- D. cc-xnet.traps.paloaltonetworks.com
- E. cc-xnet50.traps.paloaltonetworks.com
- F. ch-xnet.traps.paloaltonetworks.com
Answer: D,E,F
NEW QUESTION # 29
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)
- A. hostname
- B. quarantine status
- C. attack threat intelligence tag
- D. OS
- E. Domain/workgroup membership
Answer: A,B,D
NEW QUESTION # 30
Which two log types should be configured for firewall forwarding to the Cortex Data Lake for use by Cortex XDR? (Choose two)
- A. Security Event
- B. Analytics
- C. HIP
- D. Correlation
Answer: A,C
NEW QUESTION # 31
In the DBotScore context field, which context key would differentiate between multiple entries for the same indicator in a multi-TIP environment?
- A. Type
- B. Vendor
- C. Brand
- D. Using
Answer: B
NEW QUESTION # 32
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?
- A. 10 GB
- B. 100 GB
- C. 1 TB
- D. 10 TB
Answer: C
NEW QUESTION # 33
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. IP
- B. domain
- C. endpoint hostname
- D. registry entry
Answer: C,D
NEW QUESTION # 34
Which task allows the playbook to follow different paths based on specific conditions?
- A. Manual
- B. Parallel
- C. Conditional
- D. Automation
Answer: A
NEW QUESTION # 35
Given the integration configuration and error in the screenshot what is the cause of the problem?
- A. incorrect server URL
- B. incorrect Username and Password
- C. incorrect instance name
- D. incorrect appliance port
Answer: C
NEW QUESTION # 36
What is the difference between an exception and an exclusion?
- A. An exception does not exist
- B. An exclusion is based on rules and exceptions are based on alerts.
- C. An exclusion does not exist
- D. An exception is based on rules and exclusions are on alerts
Answer: D
NEW QUESTION # 37
When analyzing logs for indicators, which are used for only BIOC identification'?
- A. observed activity
- B. techniques
- C. artifacts
- D. error messages
Answer: A
NEW QUESTION # 38
Which CLI query would bring back Notable Events from Splunk?
A)
B)
C)
D)
- A. Option D
- B. Option A
- C. Option C
- D. Option B
Answer: A
NEW QUESTION # 39
Which step is required to prepare the VDI Golden Image?
- A. Ensure the latest content updates are installed
- B. Run the VDI conversion tool
- C. Review any PE files that WildFire determined to be malicious
- D. Set the memory dumps to manual setting
Answer: D
NEW QUESTION # 40
Cortex XDR can schedule recurring scans of endpoints for malware. Identify two methods for initiating an on-demand malware scan (Choose two )
- A. Endpoint > Endpoint Management
- B. Telnet
- C. Response > Action Center
- D. the local console
Answer: B,C
NEW QUESTION # 41
Which four types of Traps logs are stored within Cortex Data Lake?
- A. Threat, Config, System, Analytic
- B. Threat, Monitor. System, Analytic
- C. Threat, Config, Authentication, Analytic
- D. Threat, Config, System, Data
Answer: A
NEW QUESTION # 42
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
- A. hc-xnet50.traps.paloaltonetworks.com
- B. xnettraps.paloaltonetworks.com
- C. cc.xnet50traps.paloaltonetworks.com
- D. cc-xnet.traps.paloaltonetworks.com
- E. cc-xnet50.traps.paloaltonetworks.com
- F. ch-xnet.traps.paloaltonetworks.com
Answer: D,E,F
NEW QUESTION # 43
What is the retention requirement for Cortex Data Lake sizing?
- A. number of endpoints
- B. logs per second
- C. number of days
- D. number of VM-Series NGFW
Answer: C
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-cortex-data-lake/set-log-storage-quota
NEW QUESTION # 44
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?
- A. 100 GB
- B. 10 GB
- C. 1 TB
- D. 10 TB
Answer: A
NEW QUESTION # 45
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )
- A. domain/workgroup membership
- B. alert root cause
- C. hostname
- D. presence of Flash executable
- E. OS
Answer: A,C,E
NEW QUESTION # 46
Which step is required to prepare the VDI Golden Image?
- A. Ensure the latest content updates are installed
- B. Run the VDI conversion tool
- C. Review any PE files that WildFire determined to be malicious
- D. Set the memory dumps to manual setting
Answer: C
NEW QUESTION # 47
......
Provide Valid Dumps To Help You Prepare For Palo Alto Networks System Engineer - Cortex Professional Exam: https://www.realvce.com/PSE-Cortex_free-dumps.html
PSE-Cortex Dumps Questions [2023] Pass for Exam: https://drive.google.com/open?id=1JhGtS-hKL_6-1EKTvep-E9ZyLblMHHGP