Palo Alto Networks Systems Engineer Professional - Cortex 認定 PSE-Cortex-Pro-24 試験問題:

1. What should be configured for a Cortex XSIAM customer who wants to automate the response to certain alerts?

A) Incident scoring
B) Playbook triggers
C) Data model rules
D) Correlation rules

2. A Cortex XSOAR customer wants to send a survey to users asking them to input their manager's email for a training use case so the manager can receive status reports on the employee's training. However, the customer is concerned users will provide incorrect information to avoid sending status updates to their manager.
How can Cortex XSOAR most efficiently sanitize user input prior to using the responses in the playbook?

A) Create a manual task to ask the analyst to validate the survey response in the platform.
B) Create a sub-playbook and import a list of manager emails into XSOAR. Use a conditional task comparison to check if the response matches an email on the list. If no matches are found, loop the sub- playbook and send the survey back to the user until a match is found.
C) Create a conditional task comparison to check if the response contains a valid email address.
D) Create a task that sends the survey responses to the analyst via email. If the responses are incorrect, the analyst fills out the correct response in the survey.

3. Which two types of indicators of compromise (IOCs) are available for creation in Cortex XDR? (Choose two.)

A) registry
B) hash
C) file path
D) hostname

4. Which type of log is ingested natively in Cortex XDR Pro per TB?

A) Microsoft Office 365
B) Google Kubernetes Engine
C) Demisto
D) Docker

5. When initiated, which Cortex XDR capability allows immediate termination of the process-or entire process tree-on an anomalous process discovered during investigation of a security event?

A) Live terminal
B) Log forwarding
C) Log stitching
D) Live sensors

質問と回答：