We're so confident of our products that we provide no hassle product exchange.
Palo Alto Networks PSE-Cortex-Pro-24 Exam Overview:
| Certification Vendor: | Palo Alto Networks |
|---|---|
| Exam Name: | Palo Alto Networks Systems Engineer Professional - Cortex |
| Exam Number: | PSE-Cortex-Pro-24 |
| Related Certifications: | Palo Alto Networks Systems Engineer (PSE) |
| Available Languages: | English |
| Exam Format: | Matching, Multiple Choice, Ordering |
| Sample Questions: | Palo Alto Networks PSE-Cortex-Pro-24 Sample Questions |
| Exam Way: | Online or Testing Center |
| Official Syllabus URL: | https://www.pearsonvue.com/us/en/paloaltonetworks.html |
Palo Alto Networks PSE-Cortex-Pro-24 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Cortex Platform Deployment and Installation | - Deploying Cortex Platform
|
| Topic 2: Cortex XSOAR | - Security Automation
|
| Topic 3: Incident Response | - Security Incident Management
|
| Topic 4: Threat Hunting Services | - Threat Hunting Operations
|
| Topic 5: Third-party Logs and Feeds | - Threat Intelligence Integration
|
| Topic 6: SIEM Management | - Security Event Monitoring
|
| Topic 7: Cortex XDR | - Endpoint Detection and Threat Analysis
|
Palo Alto Networks Systems Engineer Professional - Cortex Sample Questions:
What is the result of creating an exception from an exploit security event?
- A. disables the triggered EPM for the host and process involve
- B. White lists the process from Wild Fire analysis
- C. exempts administrators from generating alerts for 24 hours
- D. exempts the user from generating events for 24 hours
Correct Answer: A 🗳️
Which two actions are required to add indicators to the whitelist? (Choose two.)
- A. Upload an external file named "whitelist" to the Whitelist page.
- B. Upload an external file named "whitelist" to the Indicators page.
- C. Select the indicators and click "Delete and Whitelist" in the Indicators page.
- D. Click "New Whitelisted Indicator" in the Whitelist page.
Correct Answer: C,D 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
Which resource can a customer use to ensure that the Cortex XDR agent will operate correctly on their CentOS 07 servers?
- A. Release Notes
- B. Administrator Guide
- C. Compatibility Matrix
- D. LIVE community
Correct Answer: C 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
What is the primary function of an engine in Cortex XSOAR?
- A. To execute playbooks, scripts, commands, and integrations
- B. To store and manage incident data, remediation plans, and documentation
- C. To manage multiple Cortex XSOAR tenants
- D. To provide a user interface for security analysts
Correct Answer: A 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
When initiated, which Cortex XDR capability allows immediate termination of the process-or entire process tree-on an anomalous process discovered during investigation of a security event?
- A. Live terminal
- B. Log forwarding
- C. Live sensors
- D. Log stitching
Correct Answer: A 🗳️
Explanation: Only visible for SurePassExams members. You can sign-up / login (it's free).
By Yves
