PSE-Cortex Actual Exam Questions

Last updated on Dec. 21, 2024.
Exam Code:PSE-Cortex
Exam Name:Palo Alto Networks System Engineer Professional - Cortex
Exam Questions:65
 

Topic 1 - Exam A

Question #1 Topic 1

What does the Cortex XSOAR "Saved by Dbot" widget calculate?

  • A. amount saved in Dollars according to actions carried out by all users in Cortex XSOAR across all incidents
  • B. amount saved in Dollars by using Cortex XSOAR instead of other products
  • C. amount of time saved by each playbook task within an incident
  • D. amount of time saved by Dbot's machine learning (ML) capabilities
Reveal Solution Hide Solution   Discussion   1

Correct Answer: A 🗳️

Question #2 Topic 1

Which Cortex XDR agent capability prevents loading malicious files from USB-connected removable equipment?

  • A. agent management
  • B. device control
  • C. agent configuration
  • D. device customization
Reveal Solution Hide Solution   Discussion  

Correct Answer: B 🗳️

Question #3 Topic 1

Which type of log is ingested natively in Cortex XDR Pro per TB?

  • A. Google Kubernetes Engine
  • B. Demisto
  • C. Docker
  • D. Microsoft Office 365
Reveal Solution Hide Solution   Discussion  

Correct Answer: D 🗳️

Question #4 Topic 1

An adversary attempts to communicate with malware running on a network in order to control malware activities or to exfiltrate data from the network.
Which Cortex XDR Analytics alert will this activity most likely trigger?

  • A. uncommon local scheduled task creation
  • B. malware
  • C. new administrative behavior
  • D. DNS Tunneling
Reveal Solution Hide Solution   Discussion  

Correct Answer: D 🗳️

file Viewing page 1 out of 17 pages.
Viewing questions 1-4 out of 65 questions
Next Questions
Browse atleast 50% to increase passing rate cup
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago