PSE-Cortex by Palo Alto Networks Actual Free Exam Q&As

Question 1

A customer has purchased Cortex XDR and requires phone support for the product.
Which Palo Alto Networks offering would fulfill this need?

A. Standard Success B. Diamond Success C. Premium Success D. Platinum Success

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

Rearrange the steps into the correct order for modifying an incident layout.

Discussion 0

Correct Answer:

Explanation:

Correct

Question 3

Which statement applies to the differentiation of Cortex XDR from security information and event management (SIEM)?

A. SIEM has access to raw logs from agents, where Cortex XDR traditionally only gets alerts. B. SIEM has been entirely designed and built as cloud-native, with the ability to stitch together cloud logs, on-premises logs, third-party logs, and endpoint logs. C. Cortex XDR requires a large and diverse team of analysts and up to several weeks for simple actions like creating an alert. D. Cortex XDR allows just logging into the console and out of the box the events were blocked as a proactive approach.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

Which aspect of Cortex Xpanse allows for visibility over remote workforce risks?

A. The deployment of a Cortex Xpanse aqent on the remote endpoint B. The ability to identify customer assets on residential networks C. The use of a VPN connection to scan remote devices D. The presence of a portal for remote workers to use for posture checking

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?

A. Cortex XDR Pro per TB B. Cortex XDR Prevent C. Cortex XDR Endpoint D. Cortex XDR Pro Per Endpoint

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

Which resource can a customer use to ensure that the Cortex XDR agent will operate correctly on their CentOS 07 servers?

A. Release Notes B. LIVE community C. Compatibility Matrix D. Administrator Guide

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

Which two methods does the Cortex XDR agent use to identify malware during a scheduled scan? (Choose two.)

A. dynamic analysis B. signature comparison C. heuristic analysis D. WildFire hash comparison

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 8

Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)

A. domain B. endpoint hostname C. registry entry D. IP

Discussion 0

Correct Answer: A,D Vote an answer

Question 9

Which Cortex XDR capability allows for the immediate termination of a process discovered during investigation of a security event?

A. file explorer B. Log stitching C. live sensor D. live terminal

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Palo Alto Networks System Engineer - Cortex Professional - PSE-Cortex Exam Practice Test