Try 100% Updated PSE-Cortex Exam Questions [2021]
Pass PSE-Cortex Exam - Real Questions & Answers
NEW QUESTION 22
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
- A. xnettraps.paloaltonetworks.com
- B. cc-xnet50.traps.paloaltonetworks.com
- C. ch-xnet.traps.paloaltonetworks.com
- D. cc-xnet.traps.paloaltonetworks.com
- E. cc.xnet50traps.paloaltonetworks.com
- F. hc-xnet50.traps.paloaltonetworks.com
Answer: B,C,D
NEW QUESTION 23
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?
- A. 1 TB
- B. 10 TB
- C. 100 GB
- D. 10 GB
Answer: A
NEW QUESTION 24
In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?
- A. disable the Cortex XSOAR service
- B. enable the docker service
- C. create a "docker" group and add the "Cortex XSOAR" or "demisto" user to this group
- D. create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group
Answer: D
NEW QUESTION 25
Given the integration configuration and error in the screenshot what is the cause of the problem?
- A. incorrect Username and Password
- B. incorrect appliance port
- C. incorrect server URL
- D. incorrect instance name
Answer: A
NEW QUESTION 26
"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?
- A. !invite Bob
- B. #Bob
- C. @Bob
- D. /invite Bob
Answer: B
NEW QUESTION 27
If you have a playbook task that errors out. where could you see the output of the task?
- A. War Room of the incident
- B. Playbook Editor
- C. /var/log/messages
- D. Demisto Audit log
Answer: B
NEW QUESTION 28
The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.) SUCCESS
- A. The modified scnpt was run in the wrong Docker image
- B. The modified script required a different parameter to run successfully.
- C. The modified script attempted to access a dictionary key that did not exist in the dictionary named
"data" - D. The dictionary was defined incorrectly in the second script.
Answer: A
NEW QUESTION 29
When a Demisto Engine is part of a Load-Balancing group it?
- A. Must be in a Load-Balancing group with at least another 3 members
- B. It must have port 443 open to allow the Demisto Server to establish a connection
- C. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance
- D. Can be used separately as an engine, only if connected to the Demisto Server directly
Answer: C
NEW QUESTION 30
An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
- A. Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
- B. With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module
- C. Contact support and ask for a security exception.
- D. In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
Answer: A,D
NEW QUESTION 31
Which option is required to prepare the VDI Golden Image?
- A. Configure the Golden Image as a persistent VDI
- B. Use the Cortex XDR VDI tool to obtain verdicts for all PE files
- C. Install the Cortex XOR Agent on the local machine
- D. Run the Cortex VDI conversion tool
Answer: D
NEW QUESTION 32
A test for a Microsoft exploit has been planned. After some research Internet Explorer 11 CVE-2016-0189 has been selected and a module in Metasploit has been identified (exploit/windows/browser/ms16_051_vbscript) The description and current configuration of the exploit are as follows;
What is the remaining configuration?
A)
B)
C)
D)
- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: D
NEW QUESTION 33
Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types?
(Choose three.)
- A. Drop new incidents of the same type that contain similar information
- B. Define whether a playbook runs automatically when an incident type is encountered
- C. Add new fields to an incident type
- D. Set reminders for an incident SLA
- E. Define the way that incidents of a specific type are displayed in the system
Answer: A,B,E
NEW QUESTION 34
Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types? (Choose three.)
- A. Define whether a playbook runs automatically when an incident type is encountered
- B. Set reminders for an incident SLA
- C. Add new fields to an incident type
- D. Drop new incidents of the same type that contain similar information
- E. Define the way that incidents of a specific type are displayed in the system
Answer: A,B,E
NEW QUESTION 35
How does DBot score an indicator that has multiple reputation scores?
- A. the reputation as undefined
- B. uses the most severe score scores
- C. uses the least severe score
- D. uses the average score
Answer: B
NEW QUESTION 36
When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?
- A. SplunkSearch automation
- B. SplunkGO integration
- C. splunk-get-alerts integration command
- D. Cortex XSOAR TA App for Splunk
Answer: D
NEW QUESTION 37
"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?
- A. !invite Bob
- B. /invite Bob
- C. @Bob
- D. #Bob
Answer: C
NEW QUESTION 38
Which CLI query would bring back Notable Events from Splunk?
A)
B)
C)
D)
- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: D
NEW QUESTION 39
What is the difference between an exception and an exclusion?
- A. An exception is based on rules and exclusions are on alerts
- B. An exclusion does not exist
- C. An exception does not exist
- D. An exclusion is based on rules and exceptions are based on alerts.
Answer: A
NEW QUESTION 40
......
PSE-Cortex Exam Questions Get Updated [2021] with Correct Answers: https://www.pass4guide.com/PSE-Cortex-exam-guide-torrent.html
Free Palo Alto Networks PSE-Cortex Test Practice Test Questions Exam Dumps: https://drive.google.com/open?id=1CcDIM9zLsflczHGoLIr4yqW-P7eaDxX5