PSE-Cortex Palo Alto Networks Practice Questions

Question #6 (Topic: Demo Questions)

An adversary is attempting to communicate with malware running on your network for the purpose of controlling malware activities or for ex filtrating data from your network. Which Cortex XDR Analytics alert is this activity most likely to trigger ' ?

A.

Uncommon Local Scheduled Task Creation

B.

Malware

C.

New Administrative Behavior

D.

DNS Tunneling

Correct Answer: D

Explanation not available for this question.

Question #7 (Topic: Demo Questions)

What is the result of creating an exception from an exploit security event?

A.

White lists the process from Wild Fire analysis

B.

exempts the user from generating events for 24 hours

C.

exempts administrators from generating alerts for 24 hours

D.

disables the triggered EPM for the host and process involve

Correct Answer: D

Explanation not available for this question.

Question #8 (Topic: Demo Questions)

How does the integration between Cortex Xpanse and Cortex XSOAR benefit security teams?

A.

By enhancing firewall rule management

B.

By enabling automatic incident response actions for internet-based incidents

C.

By providing real-time threat intelligence feeds

D.

By automating endpoint detection and response (EDR) processes

Correct Answer: B

Explanation:

The integration between Cortex Xpanse and Cortex XSOAR benefits security teams by enabling automatic incident response actions for internet-based incidents . This integration allows security teams to automate the detection, investigation, and response to threats identified through internet-facing assets, improving efficiency and reducing response time.

Palo Alto Networks PSE-Cortex - Palo Alto Networks System Engineer - Cortex Professional Certification Exam

An adversary is attempting to communicate with malware running on your network for the purpose of controlling malware activities or for ex filtrating data from your network. Which Cortex XDR Analytics alert is this activity most likely to trigger ' ?

Uncommon Local Scheduled Task Creation

Malware

New Administrative Behavior

DNS Tunneling

Correct Answer: D

What is the result of creating an exception from an exploit security event?

White lists the process from Wild Fire analysis

exempts the user from generating events for 24 hours

exempts administrators from generating alerts for 24 hours

disables the triggered EPM for the host and process involve

Correct Answer: D

How does the integration between Cortex Xpanse and Cortex XSOAR benefit security teams?

By enhancing firewall rule management

By enabling automatic incident response actions for internet-based incidents

By providing real-time threat intelligence feeds

By automating endpoint detection and response (EDR) processes

Correct Answer: B