[2024年07月]に更新されたPalo Alto Networks Certification PSE-Cortex試験練習問題集お試しセット
2024年最新のPSE-Cortexプレミアム資料テストPDF無料問題集お試しセット
質問 # 23
What is the result of creating an exception from an exploit security event?
- A. White lists the process from Wild Fire analysis
- B. disables the triggered EPM for the host and process involve
- C. exempts administrators from generating alerts for 24 hours
- D. exempts the user from generating events for 24 hours
正解：B
質問 # 24
Which CLI query would bring back Notable Events from Splunk?
A)
B)
C)
D)
- A. Option C
- B. Option B
- C. Option A
- D. Option D
正解：D
質問 # 25
A General Purpose Dynamic Section can be added to which two layouts for incident types? (Choose two)
- A. "New"/Edit" Incident Form
- B. Incident Quick View
- C. Incident Summary
- D. "Close" Incident Form
正解：B、C
質問 # 26
Which four types of Traps logs are stored within Cortex Data Lake?
- A. Threat, Config, System, Data
- B. Threat, Monitor. System, Analytic
- C. Threat, Config, System, Analytic
- D. Threat, Config, Authentication, Analytic
正解：C
質問 # 27
Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?
Which two playbook functionalities allow looping through a group of tasks during playbook execution? (Choose two.)
- A. Sub-Play books
- B. Playbook Tasks
- C. Playbook Functions
- D. Generic Polling Automation Playbook
正解：A、D
質問 # 28
Which option is required to prepare the VDI Golden Image?
- A. Configure the Golden Image as a persistent VDI
- B. Run the Cortex VDI conversion tool
- C. Use the Cortex XDR VDI tool to obtain verdicts for all PE files
- D. Install the Cortex XOR Agent on the local machine
正解：C
質問 # 29
What are two manual actions allowed on War Room entries? (Choose two.)
- A. Mark as scheduled entry
- B. Mark as artifact
- C. Mark as evidence
- D. Mark as note
正解：C、D
質問 # 30
When analyzing logs for indicators, which are used for only BIOC identification'?
- A. artifacts
- B. techniques
- C. error messages
- D. observed activity
正解：B
質問 # 31
The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.) SUCCESS
- A. The modified script attempted to access a dictionary key that did not exist in the dictionary named
"data" - B. The modified script required a different parameter to run successfully.
- C. The modified scnpt was run in the wrong Docker image
- D. The dictionary was defined incorrectly in the second script.
正解：C
質問 # 32
In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?
- A. enable the docker service
- B. create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group
- C. create a "docker" group and add the "Cortex XSOAR" or "demisto" user to this group
- D. disable the Cortex XSOAR service
正解：C
質問 # 33
If an anomalous process is discovered while investigating the cause of a security event, you can take immediate action to terminate the process or the whole process tree, and block processes from running by initiating which Cortex XDR capability?
- A. File Explorer
- B. Live Sensors
- C. Log Stitching
- D. Live Terminal
正解：D
質問 # 34
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. domain
- B. endpoint hostname
- C. registry entry
- D. IP
正解：A、D
質問 # 35
Which process in the causality chain does the Cortex XDR agent identify as triggering an event sequence?
- A. the relevant shell
- B. The causality group owner
- C. the chain's alert initiator
- D. the adversary's remote process
正解：B
質問 # 36
Rearrange the steps into the correct order for modifying an incident layout.
正解：
解説：
1 - Navigate to Settings > Advanced > Incident Types
2 - Select the incident type you want to customize the layout view for
3 - Edit the layout
4 - Select the Edit Layout option
5 - Navigate to Settings > Layout Builder
質問 # 37
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. < >
- B. =>
- C. not Contains
- D. !*
正解：C、D
解説：
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-cortex-xdr/manage-tables.html
質問 # 38
An administrator of a Cortex XDR protected production environment would like to test its ability to protect users from a known flash player exploit.
What is the safest way to do it?
- A. The administrator should use the Cortex XDR tray icon to confirm his corporate laptop is fully protected then open the weaponized flash file on his machine, and monitor the Events tab on the Cortex XDR console.
- B. The administrator should create a non-production Cortex XDR test environment that accurately represents the production environment, introduce the weaponized flash file, and monitor the Events tab on the Cortex XDR console.
- C. The administrator should place a copy of the weaponized flash file on several USB drives, scatter them around the office and monitor the Events tab on the Cortex XDR console
- D. The administrator should attach a copy of the weapomzed flash file to an email, send the email to a selected group of employees, and monitor the Events tab on the Cortex XDR console
正解：D
質問 # 39
Cortex XDR can schedule recurring scans of endpoints for malware. Identify two methods for initiating an on-demand malware scan (Choose two )
- A. Endpoint > Endpoint Management
- B. the local console
- C. Telnet
- D. Response > Action Center
正解：A、D
質問 # 40
Given the integration configuration and error in the screenshot what is the cause of the problem?
- A. incorrect Username and Password
- B. incorrect server URL
- C. incorrect appliance port
- D. incorrect instance name
正解：D
質問 # 41
What is the retention requirement for Cortex Data Lake sizing?
- A. number of days
- B. number of endpoints
- C. logs per second
- D. number of VM-Series NGFW
正解：A
解説：
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-corte
質問 # 42
What method does the Traps agent use to identify malware during a scheduled scan?
- A. WildFire hash comparison and dynamic analysis
- B. Local analysis
- C. Signature comparison
- D. Heuristic analysis
正解：A
質問 # 43
A prospect has agreed to do a 30-day POC and asked to integrate with a product that Demisto currently does not have an integration with. How should you respond?
- A. Extend the POC window to allow the solution architects to build it
- B. Tell them we can build it with Professional Services.
- C. Agree to build the integration as part of the POC
- D. Tell them custom integrations are not created as part of the POC
正解：A
質問 # 44
......
認定されたPSE-Cortexプロフェッショナルになるには、候補者はCortex XDRのアーキテクチャ、展開、設定、および管理に関する知識をテストする厳しい試験に合格する必要があります。試験は、候補者が実世界の状況で知識を適用する能力を示すシナリオベースの質問や多肢選択問題で構成されています。候補者は、認定を取得するために合格点を達成する必要があります。
今すぐ弊社のPalo Alto Networks Certification試験パッケージ使って試験準備してPSE-Cortexをパスせよ：https://jp.fast2test.com/PSE-Cortex-premium-file.html
全幅的な更新されたトレーニング専門問題を使って2024年最新のPSE-Cortex試験問題集テスト合格：https://drive.google.com/open?id=1a8PfeeP63yUZir692hnMkTsn42vzLZqB