Latest Success Metrics For Actual PSE-Cortex Exam 2023 Realistic Dumps [Q30-Q52] : Actual Test Materials : http://blog.actualtests4sure.com

NEW QUESTION 30
Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?

Agent Configuration

Device Control

Device Customization

Agent Management

NEW QUESTION 31
Whichfour types of Traps logs are stored within Cortex Data Lake?

Threat, Config, System,Data

Threat, Config, System, Analytic

Threat, Monitor. System, Analytic

Threat, Config, Authentication, Analytic

NEW QUESTION 32
If you have a playbook task that errors out. where could you see the output of the task?

/var/log/messages

War Room of the incident

Demisto Audit log

Playbook Editor

NEW QUESTION 33
In the DBotScore context field, which context key would differentiate between multiple entries for the same indicator in a multi-TIP environment?

Vendor

Type

Using

Brand

NEW QUESTION 34
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?

1 TB

10 GB

100 GB

10 TB

NEW QUESTION 35
The prospect is deciding whether to go with a phishing or a ServiceNow use case as part of their POC We have integrations for both but a playbook for phishing only Which use case should be used for the POC?

phishing

either

ServiceNow

neither

NEW QUESTION 36
Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?

Which two playbook functionalities allow looping through a group of tasks during playbook execution?
(Choose two.)

Generic Polling Automation Playbook

Playbook Tasks

Sub-Play books

Playbook Functions

NEW QUESTION 37
How do sub-playbooks affect the Incident Context Data?

When set to private, task outputs do not automatically get written to the root context

When set to private, task outputs automatically get written to the root context

When set to global, allows parallel task execution.

When set to global, sub-playbook tasks do not have access to the root context

NEW QUESTION 38
Which task allows the playbook to follow different paths based on specific conditions?

Conditional

Automation

Manual

Parallel

NEW QUESTION 39
Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?

Which two playbook functionalities allow looping through a group of tasks during playbook execution? (Choose two.)

Generic Polling Automation Playbook

Playbook Tasks

Sub-Play books

Playbook Functions

NEW QUESTION 40
“Bob” is a Demisto user. Which command is used to add ‘Bob” to an investigation from the War Room CLI?

#Bob

/invite Bob

@Bob

!invite Bob

NEW QUESTION 41
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)

Domain/workgroup membership

quarantine status

hostname

attack threat intelligence tag

NEW QUESTION 42
How does an “inline” auto-extract task affect playbook execution?

Doesn’t wait until the indicators are enriched and continues executing the next step

Doesn’t wait until the indicators are enriched but populate context data before executing the next

step. Wait until the indicators are enriched but doesn’t populate context data before executing the next step.

Wait until the indicators are enriched and populate context data before executing the next step.

NEW QUESTION 43
Which two entities can be created as a BIOC? (Choose two.)

file

registry

event log

alert log

NEW QUESTION 44
Which two log types should be configuredfor firewall forwarding to the Cortex Data Lake for use by Cortex XDR?(Choose two)

Security Event

HIP

Correlation

Analytics

NEW QUESTION 45
Which step is required to prepare the VDI Golden Image?

Review any PE files that WildFire determined to be malicious

Ensure the latest content updates are installed

Run the VDI conversion tool

Set the memory dumps to manual setting

NEW QUESTION 46
An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project’s operational considerations’?

endpoint manager

SOC manager

SOC analyst

desktop engineer

NEW QUESTION 47
“Bob” is a Demisto user. Which command is used to add ‘Bob” to an investigation from the War Room CLI?

#Bob

/invite Bob

@Bob

!invite Bob

NEW QUESTION 48
Which Cortex XDR capability extends investigations to an endpoint?

Log Stitching

Causality Chain

Sensors

Live Terminal

NEW QUESTION 49
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?

1 TB

10 GB

100 GB

10 TB

NEW QUESTION 50
When a Demisto Engine is part of a Load-Balancing group it?

Must be in a Load-Balancing group with at least another 3 members

It must have port 443 open to allow the Demisto Server to establish a connection

Can be used separately as an engine, only if connected to the Demisto Server directly

Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance

NEW QUESTION 51
What are two manual actions allowed on War Room entries? (Choose two.)

Mark as artifact

Mark as scheduled entry

Mark as note

Mark as evidence

NEW QUESTION 52
Which process in the causality chain does the Cortex XDR agent identify as triggering an event sequence?

the relevant shell

The causality group owner

the adversary’s remote process

the chain’s alert initiator