During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
A.
cc-xnet50.traps.paloaltonetworks.com
B.
hc-xnet50.traps.paloaltonetworks.com
C.
cc-xnet.traps.paloaltonetworks.com
D.
cc.xnet50traps.paloaltonetworks.com
E.
xnettraps.paloaltonetworks.com
F.
ch-xnet.traps.paloaltonetworks.com
cc-xnet50.traps.paloaltonetworks.com
cc-xnet.traps.paloaltonetworks.com
ch-xnet.traps.paloaltonetworks.com
What is the retention requirement for Cortex Data Lake sizing?
A.
number of endpoints
B.
number of VM-Series NGFW
C.
number of days
D.
logs per second
number of days
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-cortex
How does an "inline" auto-extract task affect playbook execution?
A.
Doesn't wait until the indicators are enriched and continues executing the next step
B.
Doesn't wait until the indicators are enriched but populate context data before executing the next
C.
step. Wait until the indicators are enriched but doesn't populate context data before executing the next
step.
D.
Wait until the indicators are enriched and populate context data before executing the next step.
Wait until the indicators are enriched and populate context data before executing the next step.
An Administrator is alerted to a Suspicious Process Creation security event from multiple users. The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
A.
With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module
B.
Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
C.
In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
D.
Contact support and ask for a security exception
Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?
A.
splunk-get-alerts integration command
B.
Cortex XSOAR TA App for Splunk
C.
SplunkSearch automation
D.
SplunkGO integration
Cortex XSOAR TA App for Splunk
Rearrange the steps into the correct order for modifying an incident layout. 
If an anomalous process is discovered while investigating the cause of a security event, you can take
immediate action to terminate the process or the whole process tree, and block processes from running by initiating which Cortex XDR capability?
A.
Live Sensors
B.
File Explorer
C.
Log Stitching
D.
Live Terminal
Live Terminal
Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable
equipment?
A.
Agent Configuration
B.
Device Control
C.
Device Customization
D.
Agent Management
Device Control
https://live.paloaltonetworks.com/t5/blogs/cortex-xdr-features-introduced-in-december-2019/ba-p/302231
Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?
A.
RPM
B.
SH
C.
DEB
D.
ZIP
ZIP
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/engines/install-deploy-and-confi
Whichfour types of Traps logs are stored within Cortex Data Lake?
A.
Threat, Config, System,Data
B.
Threat, Config, System, Analytic
C.
Threat, Monitor. System, Analytic
D.
Threat, Config, Authentication, Analytic
Threat, Config, System,Data
Which option is required to prepare the VDI Golden Image?
A.
Configure the Golden Image as a persistent VDI
B.
Use the Cortex XDR VDI tool to obtain verdicts for all PE files
C.
Install the Cortex XOR Agent on the local machine
D.
Run the Cortex VDI conversion tool
Use the Cortex XDR VDI tool to obtain verdicts for all PE files
When analyzing logs for indicators, which are used for only BIOC identification'?
A.
observed activity
B.
artifacts
C.
techniques
D.
error messages
techniques
| Page 1 out of 5 Pages |
| 12 |
Real-World Scenario Mastery: Our PSE-Cortex practice exam don't just test definitions. They present you with the same complex, scenario-based problems you'll encounter on the actual exam.
Strategic Weakness Identification: Each practice session reveals exactly where you stand. Discover which domains need more attention, before Palo Alto Networks System Engineer - Cortex Professional exam day arrives.
Confidence Through Familiarity: There's no substitute for knowing what to expect. When you've worked through our comprehensive PSE-Cortex practice exam questions pool covering all topics, the real exam feels like just another practice session.
Copyright © All Rights Reserved