Spring Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

Palo Alto Networks System Engineer - Cortex Professional

Last Update 4 hours ago Total Questions : 168

The Palo Alto Networks System Engineer - Cortex Professional content is now fully updated, with all current exam questions added 4 hours ago. Deciding to include PSE-Cortex practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our PSE-Cortex exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these PSE-Cortex sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any Palo Alto Networks System Engineer - Cortex Professional practice test comfortably within the allotted time.

Question # 41

How can Cortex XSOAR save time when a phishing incident occurs?

A.

It can automatically email staff to warn them about the phishing attack and show them a copy of the email.

B.

It can automatically respond to the phishing email to unsubscribe from future emails.

C.

It can automatically purge the email from user mailboxes in which it has not yet opened.

D.

It can automatically identify every mailbox that received the phish and create corresponding cases for them.

Question # 42

Which integration allows data to be pushed from Cortex XSOAR into Splunk?

A.

ArcSight ESM integration

B.

SplunkUpdate integration

C.

Demisto App for Splunk integration

D.

SplunkPY integration

Question # 43

What method does the Traps agent use to identify malware during a scheduled scan?

A.

Heuristic analysis

B.

Local analysis

C.

Signature comparison

D.

WildFire hash comparison and dynamic analysis

Question # 44

A customer has purchased Cortex XDR and requires 24/7 monitoring of the platform. However, the customer only has staff available during business hours.

Which Palo Alto Networks offering would best meet this requirement?

A.

Security Orchestration, Automation and Response

B.

Security Information and Event Management

C.

Managed Detection and Response

D.

Network Detection and Response

Question # 45

Cortex XSOAR has extracted a malicious IP address involved in command-and-control traffic.

What is the best method to automatically block this IP from communicating with endpoints without requiring a configuration change on the firewall?

A.

Create a NetOps ticket requesting a configuration change to the firewall to block the IP.

B.

Add the IP address to an external dynamic list used by the firewall.

C.

Add the IP address to a threat intelligence management malicious IP list to elevate priority of future alerts.

D.

Block the IP address by creating a deny rule in the firewall.

Question # 46

In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?

A.

create a “docker” group and add the " Cortex XSOAR " or " demisto " user to this group

B.

create a " Cortex XSOAR ' or " demisto " group and add the " docker " user to this group

C.

disable the Cortex XSOAR service

D.

enable the docker service

Question # 47

An administrator has a critical group of systems running Windows XP SP3 that cannot be upgraded The administrator wants to evaluate the ability of Traps to protect these systems and the word processing applications running on them

How should an administrator perform this evaluation?

A.

Gather information about the word processing applications and run them on a Windows XP SP3 VM Determine if any of the applications are vulnerable and run the exploit with an exploitation tool

B.

Run word processing exploits in a latest version of Windows VM in a controlled and isolated environment. Document indicators of compromise and compare to Traps protection capabilities

C.

Run a known 2015 flash exploit on a Windows XP SP3 VM. and run an exploitation tool that acts as a listener Use the results to demonstrate Traps capabilities

D.

Prepare the latest version of Windows VM Gather information about the word processing applications, determine if some of them are vulnerable and prepare a working exploit for at least one of them Execute with an exploitation tool

Question # 48

Which two methods does the Cortex XDR agent use to identify malware during a scheduled scan? (Choose two.)

A.

WildFire hash comparison

B.

heuristic analysis

C.

signature comparison

D.

dynamic analysis

Question # 49

How does an " inline " auto-extract task affect playbook execution?

A.

Doesn ' t wait until the indicators are enriched and continues executing the next step

B.

Doesn ' t wait until the indicators are enriched but populate context data before executing the next

C.

step. Wait until the indicators are enriched but doesn ' t populate context data before executing the next step.

D.

Wait until the indicators are enriched and populate context data before executing the next step.

Question # 50

A prospective customer is interested in Cortex XDR but is enable to run a product evaluation.

Which tool can be used instead to showcase Cortex XDR?

A.

Test Flight

B.

War Game

C.

Tech Rehearsal

D.

Capture the Flag

Go to page: