PSE-Cortexリアルな試験問題PSE-Cortex練習問題集
厳密検証されたPSE-Cortex試験問題集と解答で無料提供のPSE-Cortex問題と正解付き
質問 22
Which Cortex XDR capability extends investigations to an endpoint?
- A. Live Terminal
- B. Causality Chain
- C. Sensors
- D. Log Stitching
正解: D
解説:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-conc
質問 23
When analyzing logs for indicators, which are used for only BIOC identification'?
- A. artifacts
- B. techniques
- C. error messages
- D. observed activity
正解: D
質問 24
How does DBot score an indicator that has multiple reputation scores?
- A. uses the most severe score scores
- B. the reputation as undefined
- C. uses the least severe score
- D. uses the average score
正解: A
質問 25
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)
- A. quarantine status
- B. attack threat intelligence tag
- C. OS
- D. hostname
- E. Domain/workgroup membership
正解: C,D,E
質問 26
How do sub-playbooks affect the Incident Context Data?
- A. When set to private, task outputs do not automatically get written to the root context
- B. When set to global, allows parallel task execution.
- C. When set to private, task outputs automatically get written to the root context
- D. When set to global, sub-playbook tasks do not have access to the root context
正解: D
質問 27
Which two filter operators are available in Cortex XDR? (Choose two.)
- A. < >
- B. !*
- C. =>
- D. not Contains
正解: B,D
解説:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr-pro/use-c
質問 28
In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?
- A. enable the docker service
- B. create a "docker" group and add the "Cortex XSOAR" or "demisto" user to this group
- C. create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group
- D. disable the Cortex XSOAR service
正解: B
質問 29
Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)
- A. registry entry
- B. endpoint hostname
- C. domain
- D. IP
正解: A,B
質問 30
An administrator of a Cortex XDR protected production environment would like to test its ability to protect users from a known flash player exploit.
What is the safest way to do it?
- A. The administrator should attach a copy of the weapomzed flash file to an email, send the email to a selected group of employees, and monitor the Events tab on the Cortex XDR console
- B. The administrator should create a non-production Cortex XDR test environment that accurately represents the production environment, introduce the weaponized flash file, and monitor the Events tab on the Cortex XDR console.
- C. The administrator should place a copy of the weaponized flash file on several USB drives, scatter them around the office and monitor the Events tab on the Cortex XDR console
- D. The administrator should use the Cortex XDR tray icon to confirm his corporate laptop is fully protected then open the weaponized flash file on his machine, and monitor the Events tab on the Cortex XDR console.
正解: A
質問 31
What is the retention requirement for Cortex Data Lake sizing?
- A. number of VM-Series NGFW
- B. number of days
- C. logs per second
- D. number of endpoints
正解: B
解説:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-corte
質問 32
In the DBotScore context field, which context key would differentiate between multiple entries for the same indicator in a multi-TIP environment?
- A. Type
- B. Using
- C. Vendor
- D. Brand
正解: C
質問 33
Which option is required to prepare the VDI Golden Image?
- A. Use the Cortex XDR VDI tool to obtain verdicts for all PE files
- B. Install the Cortex XOR Agent on the local machine
- C. Run the Cortex VDI conversion tool
- D. Configure the Golden Image as a persistent VDI
正解: C
質問 34
Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?
Which two playbook functionalities allow looping through a group of tasks during playbook execution?
(Choose two.)
- A. Sub-Play books
- B. Playbook Tasks
- C. Generic Polling Automation Playbook
- D. Playbook Functions
正解: A,D
質問 35
The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.) SUCCESS
- A. The modified script required a different parameter to run successfully.
- B. The modified script attempted to access a dictionary key that did not exist in the dictionary named
"data" - C. The dictionary was defined incorrectly in the second script.
- D. The modified scnpt was run in the wrong Docker image
正解: D
質問 36
A customer wants to modify the retention periods of their Threat logs in Cortex Data Lake.
Where would the user configure the ratio of storage for each log type?
- A. Go to the Cortex Data Lake App in Cloud Services, then choose Configuration and modify the Threat Quota
- B. It is not possible to configure Cortex Data Lake quota for specific log types.
- C. Write a GPO for each endpoint agent to check in less often
- D. Within the TMS, create an agent settings profile and modify the Disk Quota value
正解: A
質問 37
Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?
- A. Device Customization
- B. Agent Configuration
- C. Agent Management
- D. Device Control
正解: D
解説:
https://live.paloaltonetworks.com/t5/blogs/cortex-xdr-features-introduced-in-december-2019/ba-p/302231
質問 38
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
- A. xnettraps.paloaltonetworks.com
- B. hc-xnet50.traps.paloaltonetworks.com
- C. ch-xnet.traps.paloaltonetworks.com
- D. cc-xnet50.traps.paloaltonetworks.com
- E. cc.xnet50traps.paloaltonetworks.com
- F. cc-xnet.traps.paloaltonetworks.com
正解: C,D,F
質問 39
Which task allows the playbook to follow different paths based on specific conditions?
- A. Parallel
- B. Automation
- C. Manual
- D. Conditional
正解: C
質問 40
Which two log types should be configuredfor firewall forwarding to the Cortex Data Lake for use by Cortex XDR?(Choose two)
- A. Correlation
- B. HIP
- C. Security Event
- D. Analytics
正解: C,D
質問 41
An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project's operational considerations'?
- A. endpoint manager
- B. SOC manager
- C. SOC analyst
- D. desktop engineer
正解: C
質問 42
The certificate used for decryption was installed as a trusted toot CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console. What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?
- A. enable SSL decryption
- B. reinstall the root CA certificate
- C. disable SSL decryption
- D. add paloaltonetworks.com to the SSL Decryption Exclusion list
正解: B
質問 43
"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?
- A. !invite Bob
- B. @Bob
- C. /invite Bob
- D. #Bob
正解: D
質問 44
Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?
- A. SH
- B. ZIP
- C. DEB
- D. RPM
正解: B
解説:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-0/cortex-xsoar-admin/engines/install-deploy-and-config
質問 45
When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?
- A. SplunkSearch automation
- B. splunk-get-alerts integration command
- C. SplunkGO integration
- D. Cortex XSOAR TA App for Splunk
正解: D
質問 46
If you have a playbook task that errors out. where could you see the output of the task?
- A. Playbook Editor
- B. War Room of the incident
- C. Demisto Audit log
- D. /var/log/messages
正解: A
質問 47
......
無料でゲット！高評価Palo Alto Networks PSE-Cortex試験問題集を今すぐダウンロード！：https://jp.fast2test.com/PSE-Cortex-premium-file.html
あなたを合格させるPSE-Cortex無料最新問題集でPalo Alto Networks練習テストしよう：https://drive.google.com/open?id=1a8PfeeP63yUZir692hnMkTsn42vzLZqB