PSE-Cortex Exam Training Practice Tests (Palo Alto Networks System Engineer

Question 1

Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?

A. DEB B. RPM C. SH D. ZIP

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

When initiated, which Cortex XDR capability allows immediate termination of the process-or entire process tree-on an anomalous process discovered during investigation of a security event?

A. Live sensors B. Log forwarding C. Live terminal D. Log stitching

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

How can you view all the relevant incidents for an indicator?

A. Linked Indicators column in Incident Screen B. Related Incidents column in Indicator Screen C. Linked Incidents column in Indicator Screen D. Related Indicators column in Incident Screen

Correct Answer: B

Question 4

A Cortex Xpanse customer receives an email regarding an upcoming product update and wants to get more information on the new features.
In which resource can the customer access this information?

A. LIVEcommunitv B. Administrator Guide C. Release Notes D. Compatibility Matrix

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

Which technology allows a customer to integrate Cortex Xpanse with third-party applications or services, assets, and IP ranges while leveraging investigation capabilities?

A. POSTMAN B. REST API
D KPI C. Webhook

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

What is the difference between the intel feed's license quotas of Cortex XSOAR Starter Edition and Cortex XSOAR (SOAR + TIM)?

A. Cortex XSOAR Started Edition has unlimited access to the Threat Intel Library. B. In Cortex XSOAR (SOAR + TIM), intelligence detail view and relationships data are not included. C. Cortex XSOAR Starter Edition includes up to 5 active feeds and 100 indicators/fetch. D. In Cortex XSOAR (SOAR + TIM), Unit 42 Intelligence is not included.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

Which two troubleshooting steps should be taken when an integration is failing to connect? (Choose two.)

A. Check the integration logs and enable a higher logging level, if needed, view the specific error. B. Confirm there are no dashboards or reports configured to use that integration instance. C. Ensure the playbook is set to run in quiet mode to minimize CPU usage and suppress errors D. Confirm the integration credentials or API keys are valid.

Correct Answer: A,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

When preparing the golden image in a Cortex XDR Virtual Desktop Infrastructure (VDI) deployment, which step is required?

A. Launch the VDI conversion tool. B. Enable the VDI license timeout. C. Scan the image using the imagepreptool. D. Disable automatic memory dumps.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

What is the difference between an exception and an exclusion?

A. An exclusion is based on rules and exceptions are based on alerts. B. An exclusion does not exist C. An exception is based on rules and exclusions are on alerts D. An exception does not exist

Correct Answer: C

Palo Alto Networks System Engineer - Cortex Professional - PSE-Cortex Exam Practice Test