Labour Day Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: scxmas70

PSE-Cortex Exam Dumps - Palo Alto Networks System Engineer - Cortex Professional

Question # 4

A customer wants to modify the retention periods of their Threat logs in Cortex Data Lake.

Where would the user configure the ratio of storage for each log type?

A.

Within the TMS, create an agent settings profile and modify the Disk Quota value

B.

It is not possible to configure Cortex Data Lake quota for specific log types.

C.

Go to the Cortex Data Lake App in Cloud Services, then choose Configuration and modify the Threat Quota

D.

Write a GPO for each endpoint agent to check in less often

Full Access
Question # 5

Which CLI query would bring back Notable Events from Splunk?

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 6

Which process in the causality chain does the Cortex XDR agent identify as triggering an event sequence?

A.

the relevant shell

B.

The causality group owner

C.

the adversary's remote process

D.

the chain's alert initiator

Full Access
Question # 7

How do sub-playbooks affect the Incident Context Data?

A.

When set to private, task outputs do not automatically get written to the root context

B.

When set to private, task outputs automatically get written to the root context

C.

When set to global, allows parallel task execution.

D.

When set to global, sub-playbook tasks do not have access to the root context

Full Access
Question # 8

In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )

A.

alert root cause

B.

hostname

C.

domain/workgroup membership

D.

OS

E.

presence of Flash executable

Full Access
Question # 9

Which two filter operators are available in Cortex XDR? (Choose two.)

A.

not Contains

B.

!*

C.

=>

D.

< >

Full Access