PSE-Cortex試験無料問題集（174題）「Palo Alto Networks System Engineer

出題：1

What is the function of reputation scoring in the Threat Intelligence Module of Cortex XSIAM?

A. It allows for comparison between open-source intelligence and paid services.

B. It resolves conflicting scores from different vendors with the same indicator.

C. It provides a statistical model for combining scores from multiple vendors.

D. It helps identify threat feed vendors with invalid content.

正解：B 解答を投票する

出題：2

Cortex XDR external data ingestion processes ingest data from which sources?

A. syslogs only

B. windows event logs and syslogs only

C. windows event logs, syslogs, and custom external sources

D. windows event logs only

正解：C 解答を投票する

出題：3

Which option is required to prepare the VDI Golden Image?

A. Configure the Golden Image as a persistent VDI

B. Install the Cortex XOR Agent on the local machine

C. Use the Cortex XDR VDI tool to obtain verdicts for all PE files

D. Run the Cortex VDI conversion tool

正解：C 解答を投票する

出題：4

What is the primary function of an engine in Cortex XSOAR?

A. To manage multiple Cortex XSOAR tenants

B. To provide a user interface for security analysts

C. To execute playbooks, scripts, commands, and integrations

D. To store and manage incident data, remediation plans, and documentation

正解：C 解答を投票する

出題：5

An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project's operational considerations?

A. desktop engineer

B. SOC analyst

C. SOC manager

D. endpoint manager

正解：B 解答を投票する

出題：6

How many use cases should a POC success criteria document include?

A. no more than 2

B. no more than 5

C. 3 or more

D. only 1

正解：D 解答を投票する

出題：7

Where can all the relevant incidents for an indicator be viewed?

A. Related Incidents column in indicator screen

B. Linked Incidents column in indicator screen

C. Linked Indicators column in incident screen

D. Related Indicators column in incident screen

正解：A 解答を投票する

出題：8

If an anomalous process is discovered while investigating the cause of a security event, you can take immediate action to terminate the process or the whole process tree, and block processes from running by initiating which Cortex XDR capability?

A. Live Sensors

B. File Explorer

C. Log Stitching

D. Live Terminal

正解：D 解答を投票する

出題：9

An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )

A. Contact support and ask for a security exception.

B. Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist

C. With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module

D. In the Cortex XDR security event, review the specific parent process, child process, and command line arguments

正解：B,D 解答を投票する

出題：10

A Cortex XSIAM customer is unable to access their Cortex XSIAM tenant.
Which resource can the customer use to validate the uptime of Cortex XSIAM?

A. Administrator Guide

B. Release Notes

C. Palo Alto Networks Status Page

D. LIVEcommunity

正解：C 解答を投票する

PSE-Cortex試験無料問題集「Palo Alto Networks System Engineer - Cortex Professional 認定」