[2023年04月16日] 365日無料更新PSE-Cortex知能問題集をゲット
ベスト品質のPalo Alto Networks PSE-Cortex試験問題
PSE-Cortex認定プログラムは、システムエンジニアやセキュリティ専門家に、高度なセキュリティソリューションの展開や管理におけるスキルや知識を検証する絶好の機会です。認定は、キャリアの見通しを向上させ、組織全体のセキュリティ体制に貢献することができます。
PSE-Cortex認定試験は、Cortex XDRソリューションの実装と管理に関する広範な知識と実践経験を必要とする難しい試験です。試験は60の多肢選択問題で構成され、90分以内に完了する必要があります。試験の合格基準は70％であり、試験に合格した候補者は2年間有効なPSE-Cortex認定を受け取ります。この認定は、Cortex XDRソリューションの実装と管理の専門知識を示し、サイバーセキュリティ業界の雇用主に高く評価されています。
質問 # 23
Rearrange the steps into the correct order for modifying an incident layout.
正解：
解説：
1 - Navigate to Settings > Advanced > Incident Types
2 - Select the incident type you want to customize the layout view for
3 - Edit the layout
4 - Select the Edit Layout option
5 - Navigate to Settings > Layout Builder
質問 # 24
Whichfour types of Traps logs are stored within Cortex Data Lake?
- A. Threat, Config, System, Analytic
- B. Threat, Config, System,Data
- C. Threat, Config, Authentication, Analytic
- D. Threat, Monitor. System, Analytic
正解：B
質問 # 25
When a Demisto Engine is part of a Load-Balancing group it?
- A. Must be in a Load-Balancing group with at least another 3 members
- B. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance
- C. Can be used separately as an engine, only if connected to the Demisto Server directly
- D. It must have port 443 open to allow the Demisto Server to establish a connection
正解：B
質問 # 26
How do sub-playbooks affect the Incident Context Data?
- A. When set to global, sub-playbook tasks do not have access to the root context
- B. When set to private, task outputs do not automatically get written to the root context
- C. When set to global, allows parallel task execution.
- D. When set to private, task outputs automatically get written to the root context
正解：A
質問 # 27
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. not Contains
- B. < >
- C. !*
- D. =>
正解：A、C
解説：
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-cortex-xdr/manage-tables.html
質問 # 28
An administrator of a Cortex XDR protected production environment would like to test its ability to protect users from a known flash player exploit.
What is the safest way to do it?
- A. The administrator should attach a copy of the weapomzed flash file to an email, send the email to a selected group of employees, and monitor the Events tab on the Cortex XDR console
- B. The administrator should create a non-production Cortex XDR test environment that accurately represents the production environment, introduce the weaponized flash file, and monitor the Events tab on the Cortex XDR console.
- C. The administrator should use the Cortex XDR tray icon to confirm his corporate laptop is fully protected then open the weaponized flash file on his machine, and monitor the Events tab on the Cortex XDR console.
- D. The administrator should place a copy of the weaponized flash file on several USB drives, scatter them around the office and monitor the Events tab on the Cortex XDR console
正解：B
質問 # 29
Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?
Which two playbook functionalities allow looping through a group of tasks during playbook execution?
(Choose two.)
- A. Playbook Functions
- B. Generic Polling Automation Playbook
- C. Playbook Tasks
- D. Sub-Play books
正解：A、D
質問 # 30
Rearrange the steps into the correct order for modifying an incident layout.
正解：
解説：
質問 # 31
If you have a playbook task that errors out. where could you see the output of the task?
- A. /var/log/messages
- B. Playbook Editor
- C. War Room of the incident
- D. Demisto Audit log
正解：B
質問 # 32
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. not Contains
- B. < >
- C. !*
- D. =>
正解：A、C
解説：
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-c
質問 # 33
Which two log types should be configured for firewall forwarding to the Cortex Data Lake for use by Cortex XDR? (Choose two)
- A. HIP
- B. Security Event
- C. Analytics
- D. Correlation
正解：A、B
質問 # 34
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
- A. Cortex XDR Pro Per Endpoint
- B. Cortex XDR Pro per TB
- C. Cortex XDR Endpoint
- D. Cortex XDR Prevent
正解：A
解説：
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licenses/migrate-your-cortex-xdr-license
質問 # 35
"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?
- A. !invite Bob
- B. #Bob
- C. @Bob
- D. /invite Bob
正解：B
質問 # 36
An EDR project was initiated by a CISO. Which resource will likely have the most heavy influence on the project?
- A. desktop engineer
- B. SOC analyst IT
- C. SOC manager
- D. operations manager
正解：C
質問 # 37
When analyzing logs for indicators, which are used for only BIOC identification'?
- A. artifacts
- B. error messages
- C. observed activity
- D. techniques
正解：D
質問 # 38
How does DBot score an indicator that has multiple reputation scores?
- A. uses the least severe score
- B. uses the most severe score scores
- C. the reputation as undefined
- D. uses the average score
正解：B
質問 # 39
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)
- A. attack threat intelligence tag
- B. quarantine status
- C. Domain/workgroup membership
- D. hostname
- E. OS
正解：B、D、E
質問 # 40
When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?
- A. SplunkGO integration
- B. SplunkSearch automation
- C. splunk-get-alerts integration command
- D. Cortex XSOAR TA App for Splunk
正解：C
質問 # 41
......
PSE-Cortex 試験は、エンドポイントセキュリティ、ネットワークセキュリティ、クラウドセキュリティ、脅威インテリジェンス、および事件対応など、幅広いトピックをカバーする包括的な試験です。この試験は、候補者が実世界のシナリオでセキュリティソリューションを実装できる能力をテストする複数択問題とシミュレーションで構成されています。
Palo Alto Networks試験練習テスト問題で高得点を目指そう：https://jp.fast2test.com/PSE-Cortex-premium-file.html
検証された材料は決まってこれ！PSE-Cortex：https://drive.google.com/open?id=1a8PfeeP63yUZir692hnMkTsn42vzLZqB