PSE-Cortex-Pro-24問題集、Palo Alto Networks実際の試験問題

質問 1

Which two areas of Cortex XDR are used for threat hunting activities? (Choose two.)

A. indicators of compromise (IOC) rules

B. live terminal

C. query builder

D. host insights module

正解: C,D

解説: (PassTest メンバーにのみ表示されます)

質問 2

The prospect is deciding whether to go with a phishing or a ServiceNow use case as part of their POC We have integrations for both but a playbook for phishing only Which use case should be used for the POC?

A. neither

B. phishing

C. ServiceNow

D. either

正解: B

質問 3

Which statement applies to the differentiation of Cortex XDR from security information and event management (SIEM)?

A. Cortex XDR requires a large and diverse team of analysts and up to several weeks for simple actions like creating an alert.

B. SIEM has access to raw logs from agents, where Cortex XDR traditionally only gets alerts.

C. Cortex XDR allows just logging into the console and out of the box the events were blocked as a proactive approach.

D. SIEM has been entirely designed and built as cloud-native, with the ability to stitch together cloud logs, on-premises logs, third-party logs, and endpoint logs.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which integration allows data to be pushed from Cortex XSOAR into Splunk?

A. SplunkPY integration

B. Demisto App for Splunk integration

C. SplunkUpdate integration

D. ArcSight ESM integration

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 5

A prospective customer is interested in Cortex XDR but is enable to run a product evaluation.
Which tool can be used instead to showcase Cortex XDR?

A. Tech Rehearsal

B. War Game

C. Capture the Flag

D. Test Flight

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 6

Which command-line interface (CLI) query would retrieve the last three Splunk events?

A. !search using=splunk_instance_1 query="* | 3"

B. !query using=splunk_instance_1 query="* | last 3"

C. !search using=splunk_instance_1 query="* | head 3"

D. !search using=splunk_instance_1 query="* | last 3"

正解: C

質問 7

What are two ways a customer can configure user authentication access Cortex Xpanse? (Choose two.)

A. Customer Support Portal

B. RADIUS

C. Secure Shell (SSH)

D. SAML

正解: B,D

質問 8

When running a Cortex XSIAM proof of value (POV), why is it important to deploy the Cortex XDR agent?

A. It runs automation daybooks on the endpoints.

B. It will prevent all threats in the environment.

C. It provides telemetry for stitching and analytics.

D. It is used to enforce license compliance.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 9

What are process exceptions used for?

A. disable an EPM for a particular process

B. permit processes to load specific DLLs

C. change the WildFire verdict for a given executable

D. whitelist programs from WildFire analysis

正解: A

質問 10

Which statement applies to the malware protection flow in Cortex XDR Prevent?

A. In the final step, the block list is verified.

B. A trusted signed file is exempt from local static analysis.

C. Local static analysis happens before a WildFire verdict check.

D. Hash comparisons come after local static analysis.

正解: C

解説: (PassTest メンバーにのみ表示されます)

Palo Alto Networks Systems Engineer Professional - Cortex - PSE-Cortex-Pro-24 模擬練習