Palo Alto Networks Systems Engineer Professional - Cortex 認定 PSE-Cortex-Pro-24 試験問題:

1. A customer has purchased Cortex Data Lake storage with the following configuration, which requires 2 TB of Cortex Data Lake to order:
support for 300 total Cortex XDR clients all forwarding Cortex XDR data with 30-day retention storage for higher fidelity logs to support Cortex XDR advanced analytics The customer now needs 1000 total Cortex XDR clients, but continues with 300 clients forwarding Cortex XDR data with 30-day retention.
What is the new total storage requirement for Cortex Data Lake storage to order?

A) 2 TB
B) 4 TB
C) 8 TB
D) 16 TB

2. What is the difference between an exception and an exclusion?

A) An exclusion is based on rules and exceptions are based on alerts.
B) An exception does not exist
C) An exclusion does not exist
D) An exception is based on rules and exclusions are on alerts

3. What are two ways Cortex XSIAM monitors for issues with data ingestion? (Choose two.)

A) It automatically runs a copilot playbook to troubleshoot and resolve ingestion issues.
B) The Cortex XSIAM Command Center dashboard will display a red icon if a data source is having issues.
C) The tenant's compute units consumption will change dramatically, indicating a collection issue.
D) The Data Ingestion Health page identifies deviations from normal patterns of log collection

4. What is the retention requirement for Cortex Data Lake sizing?

A) number of VM-Series NGFW
B) number of days
C) logs per second
D) number of endpoints

5. An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )

A) Contact support and ask for a security exception.
B) Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
C) With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module
D) In the Cortex XDR security event, review the specific parent process, child process, and command line arguments

質問と回答：