Palo Alto Networks PSE-Cortex - Palo Alto Networks System Engineer Professional - Cortex Exam
Page: 1 / 25
Total 122 questions
Question #1 (Topic: Exam A)
What does the Cortex XSOAR "Saved by Dbot" widget calculate?
A. amount saved in Dollars according to actions carried out by all users in Cortex XSOAR across all incidents
B. amount saved in Dollars by using Cortex XSOAR instead of other products
C. amount of time saved by each playbook task within an incident
D. amount of time saved by Dbot's machine learning (ML) capabilities
Answer: A
Question #2 (Topic: Exam A)
Which Cortex XDR agent capability prevents loading malicious files from USB-connected removable equipment?
A. agent management
B. device control
C. agent configuration
D. device customization
Answer: B
Question #3 (Topic: Exam A)
Which type of log is ingested natively in Cortex XDR Pro per TB?
A. Google Kubernetes Engine
B. Demisto
C. Docker
D. Microsoft Office 365
Answer: D
Question #4 (Topic: Exam A)
An adversary attempts to communicate with malware running on a network in order to control malware activities or to exfiltrate data from the network.
Which Cortex XDR Analytics alert will this activity most likely trigger?
Which Cortex XDR Analytics alert will this activity most likely trigger?
A. uncommon local scheduled task creation
B. malware
C. new administrative behavior
D. DNS Tunneling
Answer: D
Question #5 (Topic: Exam A)
How do sub-playbooks affect the Incident Context Data?
A. When set to private, task outputs do not automatically get written to the root context.
B. When set to global, sub-playbook tasks do not have access to the root context.
C. When set to global, parallel task execution is allowed.
D. When set to private, task outputs are automatically written to the root context.
Answer: A
