[2024年02月] を試そう！リアルPSE-Cortex問題集で100%無料PSE-Cortex試験問題集
PSE-CortexのPDF問題集試験問題 有効なPSE-Cortex問題集
質問 # 18
An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project's operational considerations'?
- A. SOC manager
- B. desktop engineer
- C. SOC analyst
- D. endpoint manager
正解：C
質問 # 19
Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?
Which two playbook functionalities allow looping through a group of tasks during playbook execution?
(Choose two.)
- A. Generic Polling Automation Playbook
- B. Playbook Tasks
- C. Sub-Play books
- D. Playbook Functions
正解：C、D
質問 # 20
What are process exceptions used for?
- A. change the WildFire verdict for a given executable
- B. disable an EPM for a particular process
- C. whitelist programs from WildFire analysis
- D. permit processes to load specific DLLs
正解：C
質問 # 21
Which two entities can be created as a BIOC? (Choose two.)
- A. file
- B. registry
- C. alert log
- D. event log
正解：A、B
解説：
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/cortex-xd
質問 # 22
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. domain
- B. IP
- C. endpoint hostname
- D. registry entry
正解：A、B
質問 # 23
What are two manual actions allowed on War Room entries? (Choose two.)
- A. Mark as artifact
- B. Mark as scheduled entry
- C. Mark as evidence
- D. Mark as note
正解：A
質問 # 24
What is the result of creating an exception from an exploit security event?
- A. White lists the process from Wild Fire analysis
- B. disables the triggered EPM for the host and process involve
- C. exempts administrators from generating alerts for 24 hours
- D. exempts the user from generating events for 24 hours
正解：B
質問 # 25
An EDR project was initiated by a CISO. Which resource will likely have the most heavy influence on the project?
- A. SOC manager
- B. desktop engineer
- C. operations manager
- D. SOC analyst IT
正解：A
質問 # 26
What are process exceptions used for?
- A. change the WildFire verdict for a given executable
- B. whitelist programs from WildFire analysis
- C. disable an EPM for a particular process
- D. permit processes to load specific DLLs
正解：C
質問 # 27
When a Demisto Engine is part of a Load-Balancing group it?
- A. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance
- B. Must be in a Load-Balancing group with at least another 3 members
- C. It must have port 443 open to allow the Demisto Server to establish a connection
- D. Can be used separately as an engine, only if connected to the Demisto Server directly
正解：A
質問 # 28
Rearrange the steps into the correct order for modifying an incident layout.
正解：
解説：
質問 # 29
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )
- A. alert root cause
- B. domain/workgroup membership
- C. hostname
- D. presence of Flash executable
- E. OS
正解：A、B、D
質問 # 30
When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?
- A. Cortex XSOAR TA App for Splunk
- B. SplunkSearch automation
- C. splunk-get-alerts integration command
- D. SplunkGO integration
正解：A
質問 # 31
Which option describes a Load-Balancing Engine Group?
- A. A group of engines that use an algorithm to efficiently share the workload for automation scripts
- B. A group of engines that use an algorithm to efficiently share the workload for integrations
- C. A group of D2 agents that share processing power across multiple endpoints
- D. A group of engines that ensure High Availability of Demisto backend databases.
正解：A
質問 # 32
Which task allows the playbook to follow different paths based on specific conditions?
- A. Conditional
- B. Automation
- C. Manual
- D. Parallel
正解：C
質問 # 33
An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
- A. In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
- B. With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module
- C. Contact support and ask for a security exception.
- D. Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
正解：A、D
質問 # 34
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
- A. Cortex XDR Prevent
- B. Cortex XDR Pro per TB
- C. Cortex XDR Pro Per Endpoint
- D. Cortex XDR Endpoint
正解：C
解説：
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licenses/migrate-your-cortex-xdr-license
質問 # 35
A prospect has agreed to do a 30-day POC and asked to integrate with a product that Demisto currently does not have an integration with. How should you respond?
- A. Extend the POC window to allow the solution architects to build it
- B. Tell them we can build it with Professional Services.
- C. Agree to build the integration as part of the POC
- D. Tell them custom integrations are not created as part of the POC
正解：D
質問 # 36
......
究極のPSE-Cortex無料準備ガイド最新のPalo Alto Networks練習テスト問題集：https://www.passtest.jp/Palo-Alto-Networks/PSE-Cortex-shiken.html
今すぐゲットせよ！高評価Palo Alto Networks PSE-Cortex試験問題集：https://drive.google.com/open?id=1QFKmT05tg0wJmZdwaJF8O-K8Twwbz2y2