Palo Alto Networks System Engineer - Cortex Professional - PSE-Cortex 模擬練習

A. It must have port 443 open to allow the Demisto Server to establish a connection

B. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance

C. Can be used separately as an engine, only if connected to the Demisto Server directly

D. Must be in a Load-Balancing group with at least another 3 members

A. uses the most severe score scores

B. the reputation as undefined

C. uses the least severe score

D. uses the average score

A. Cortex XSOAR Starter Edition includes up to 5 active feeds and 100 indicators/fetch.

B. Cortex XSOAR Started Edition has unlimited access to the Threat Intel Library.

C. In Cortex XSOAR (SOAR + TIM), intelligence detail view and relationships data are not included.

D. In Cortex XSOAR (SOAR + TIM), Unit 42 Intelligence is not included.

A. Security Information and Event Management

B. Managed Detection and Response

C. Security Orchestration, Automation and Response

D. Network Detection and Response

A. It allows implementation teams to bypass initial scoping exercises

B. It enables customers to prepare for audits so they can demonstrate compliance.

C. It enables post-sales teams to tailor their support and training appropriately

D. It helps in assigning additional technical tasks to the customer

A. Cortex SOC Orchestrator

B. Cortex XDR Causality View

C. Cortex Data Lake

D. Cortex XSOAR Work Plan

A. Analyst, training costs, duplicated, false positives

B. People, staffing costs, duplicates, false positives

C. Standard operating procedures, staffing costs, duplicates, mean time to respond

D. People, security controls, mean time to detect, false positives

A. Implement Cortex XDR across all endpoints without assessing architecture or assets

B. Deploy agents across the entire environment for immediate protection.

C. Conduct an assessment and identify critical assets and endpoint within the environment.

D. Deploy Cortex XDR on endpoints with the highest potential for attack.

A. Playbook Editor

B. Demisto Audit log

C. War Room of the incident

D. /var/log/messages

A. Data Ingestion Dashboard

B. Asset Inventory

C. Playbook

D. Marketplace Integration

A. DEB

B. RPM

C. SH

D. ZIP

A. Broker VM

B. External dynamic list

C. XDR agent

D. Playbook

A. amount saved in Dollars by using Cortex XSOAR instead of other products

B. amount of time saved by each playbook task within an incident

C. amount saved in Dollars according to actions carried out by all users in Cortex XSOAR across all incidents

D. amount of time saved by Dbot's machine learning (ML) capabilities