PSE-Cortex Practice Exam Questions and Answers

A.  

It provides advanced customization capabilities.

B.  

It provides real-time protection across hosts and containers.

C.  

It enables consolidation of multiple point products into a single integrated service.

D.  

It enables a comprehensive view of the customer environment with regard to digital employee productivity.

A.  

amount saved in Dollars according to actions carried out by all users in Cortex XSOAR across all incidents

B.  

amount saved in Dollars by using Cortex XSOAR instead of other products

C.  

amount of time saved by each playbook task within an incident

D.  

amount of time saved by Dbot's machine learning (ML) capabilities

A.  

Audit users can only view incidents, while full users can edit system components.

B.  

Full users can only view dashboards, while audit users can investigate incidents.

C.  

Audit users have read-only permission, white full users have read-write permission.

D.  

Audit users can run scripts and playbooks, while full users can only view reports.

A.  

Advanced logging service license

B.  

HTTP Collector

C.  

Devices in the same region as XDR/XSIAM

D.  

XDR/XSIAM Broker VM

A.  

Have XSOAR automatically add the IP address to a threat intelligence management (TIM) malicious IP list to elevate priority of future alerts.

B.  

Have XSOAR automatically add the IP address to a deny rule in the firewall.

C.  

Have XSOAR automatically add the IP address to an external dynamic list (EDL) used by the firewall.

D.  

Have XSOAR automatically create a NetOps ticket requesting a configuration change to the firewall to block the IP.

A.  

IP

B.  

endpoint hostname

C.  

domain

D.  

registry entry

A.  

XSOAR Threat Intelligence Platform (TIP)

B.  

XSOAR Automated Systems

C.  

XSOAR Ticketing Systems

D.  

XSOAR Marketplace

A.  

Security Orchestration, Automation and Response

B.  

Security Information and Event Management

C.  

Managed Detection and Response

D.  

Network Detection and Response

A.  

firewall alert

B.  

SIEM alert

C.  

full URL

D.  

registry set value

A.  

playbook features

B.  

sub-playbooks

C.  

conditional tasks

D.  

manual tasks