Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Palo Alto Networks Systems Engineer Professional - Cortex Practice Questions

Question # 21

Which two areas of Cortex XDR are used for threat hunting activities? (Choose two.)

Options:

A.  

indicators of compromise (IOC) rules

B.  

query builder

C.  

live terminal

D.  

host insights module

Discussion 0
Question # 22

The Cortex XDR management service requires which other Palo Alto Networks product?

Options:

A.  

Directory Sync

B.  

Cortex Data Lake

C.  

Panorama

D.  

Cortex XSOAR

Discussion 0
Question # 23

Which two formats are supported by Whitelist? (Choose two)

Options:

A.  

Regex

B.  

STIX

C.  

CSV

D.  

CIDR

Discussion 0
Question # 24

Rearrange the steps into the correct order for modifying an incident layout.

Question # 24

Options:

Discussion 0
Question # 25

The prospect is deciding whether to go with a phishing or a ServiceNow use case as part of their POC We have integrations for both but a playbook for phishing only Which use case should be used for the POC?

Options:

A.  

phishing

B.  

either

C.  

ServiceNow

D.  

neither

Discussion 0
Question # 26

Why is Premium Customer Success an important part of any Cortex bill of materials?

Options:

A.  

It provides full implementation services.

B.  

It provides managed threat hunting

C.  

It provides instructor-led training courses.

D.  

It provides expert-led configuration guidance.

Discussion 0
Question # 27

Which two filter operators are available in Cortex XDR? (Choose two.)

Options:

A.  

< >

B.  

Contains

C.  

=

D.  

Is Contained By

Discussion 0
Question # 28

In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )

Options:

A.  

alert root cause

B.  

hostname

C.  

domain/workgroup membership

D.  

OS

E.  

presence of Flash executable

Discussion 0
Question # 29

Which statement applies to the malware protection flow of the endpoint agent in Cortex XSIAM?

Options:

A.  

A tile from an allowed signer is exempt from local analysis.

B.  

Local analysis always happens before a WildFire verdict check.

C.  

Hash comparisons come after local static analysis.

D.  

The block list is verified in the final step.

Discussion 0
Question # 30

In addition to incident volume, which four critical factors must be evaluated to determine effectiveness and ROI on cybersecurity planning and technology?

Options:

A.  

Analyst, training costs, duplicated, false positives

B.  

People, staffing costs, duplicates, false positives

C.  

People, security controls, mean time to detect, false positives

D.  

Standard operating procedures, staffing costs, duplicates, mean time to respond

Discussion 0

PSE-Cortex-Pro-24 PDF

PSE-Cortex-Pro-24 PDF (Printable)
$54.25
$154.99

PSE-Cortex-Pro-24 Testing Engine

PSE-Cortex-Pro-24 PDF (Printable)
$59.5
$169.99

PSE-Cortex-Pro-24 PDF + Testing Engine

PSE-Cortex-Pro-24 PDF (Printable)
$74.55
$212.99

Free Exams Sample Questions