Palo Alto Networks PSE-Cortex - Palo Alto Networks System Engineer Professional - Cortex Exam
Page: 3 / 25
Total 122 questions
Question #11 (Topic: Exam A)
What allows the use of predetermined Palo Alto Networks roles to assign access rights to Cortex XDR users?
A. role-based access control (RBAC)
B. cloud identity engine (CIE)
C. endpoint groups
D. restrictions security profile
Answer: A
Question #12 (Topic: Exam A)
Which two actions are required to add indicators to the whitelist? (Choose two.)
A. Click "New Whitelisted Indicator" in the Whitelist page.
B. Upload an external file named "whitelist" to the Whitelist page.
C. Upload an external file named "whitelist" to the Indicators page.
D. Select the indicators and click "Delete and Whitelist" in the Indicators page.
Answer: AD
Question #13 (Topic: Exam A)
Which playbook feature allows concurrent execution of tasks?
A. parallel tasks
B. automation tasks
C. manual tasks
D. conditional tasks
Answer: A
Question #14 (Topic: Exam A)
Which two Cortex XSOAR incident type features can be customized under Settings > Advanced > Incident Types? (Choose two.)
A. adding new fields to an incident type
B. setting reminders for an incident service level agreement (SLA)
C. defining whether a playbook runs automatically when an incident type is encountered
D. dropping new incidents of the same type that contain similar information
Answer: AC
Question #15 (Topic: Exam A)
What are two reasons incident investigation is needed in Cortex XDR? (Choose two.)
A. No solution will stop every attack requiring further investigation of activity.
B. Insider Threats may not be blocked and initial activity may go undetected.
C. Analysts need to acquire forensic artifacts of malware that has been blocked by the XDR agent.
D. Detailed reports are needed for senior management to justify the cost of XDR.
Answer: AB
