NEW QUESTION 30
Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?

NEW QUESTION 31
Whichfour types of Traps logs are stored within Cortex Data Lake?

NEW QUESTION 32
If you have a playbook task that errors out. where could you see the output of the task?

NEW QUESTION 33
In the DBotScore context field, which context key would differentiate between multiple entries for the same indicator in a multi-TIP environment?

NEW QUESTION 34
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?

NEW QUESTION 35
The prospect is deciding whether to go with a phishing or a ServiceNow use case as part of their POC We have integrations for both but a playbook for phishing only Which use case should be used for the POC?

NEW QUESTION 36
Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?

Which two playbook functionalities allow looping through a group of tasks during playbook execution?
(Choose two.)

NEW QUESTION 37
How do sub-playbooks affect the Incident Context Data?

NEW QUESTION 38
Which task allows the playbook to follow different paths based on specific conditions?

NEW QUESTION 39
Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?

Which two playbook functionalities allow looping through a group of tasks during playbook execution? (Choose two.)

NEW QUESTION 40
“Bob” is a Demisto user. Which command is used to add ‘Bob” to an investigation from the War Room CLI?

NEW QUESTION 41
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)

NEW QUESTION 42
How does an “inline” auto-extract task affect playbook execution?

NEW QUESTION 43
Which two entities can be created as a BIOC? (Choose two.)

NEW QUESTION 44
Which two log types should be configuredfor firewall forwarding to the Cortex Data Lake for use by Cortex XDR?(Choose two)

NEW QUESTION 45
Which step is required to prepare the VDI Golden Image?

NEW QUESTION 46
An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project’s operational considerations’?

NEW QUESTION 47
“Bob” is a Demisto user. Which command is used to add ‘Bob” to an investigation from the War Room CLI?

NEW QUESTION 48
Which Cortex XDR capability extends investigations to an endpoint?

NEW QUESTION 49
If a customer activates a TMS tenant and has not purchased a Cortex Data Lake instance.
Palo Alto Networks will provide the customer with a free instance
What size is this free Cortex Data Lake instance?

NEW QUESTION 50
When a Demisto Engine is part of a Load-Balancing group it?

NEW QUESTION 51
What are two manual actions allowed on War Room entries? (Choose two.)

NEW QUESTION 52
Which process in the causality chain does the Cortex XDR agent identify as triggering an event sequence?