PSE-Cortex無料問題集「Palo Alto Networks System Engineer

質問 1

Which command is used to add Cortex XSOAR "User1" to an investigation from the War Room command-line interface (CLI)?

（A）@User1

（B）/invite User1

（C）#User1

（D）!invite User1

正解：A 解答を投票する

質問 2

What is the difference between the intel feed's license quotas of Cortex XSOAR Starter Edition and Cortex XSOAR (SOAR + TIM)?

（A）In Cortex XSOAR (SOAR + TIM), Unit 42 Intelligence is not included.

（B）Cortex XSOAR Starter Edition includes up to 5 active feeds and 100 indicators/fetch.

（C）Cortex XSOAR Started Edition has unlimited access to the Threat Intel Library.

（D）In Cortex XSOAR (SOAR + TIM), intelligence detail view and relationships data are not included.

正解：B 解答を投票する

質問 3

During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation-Step 2 of 2 window.

During the service instance provisioning which three DNS host names are created? (Choose three.)

（A）cc-xnet50.traps.paloaltonetworks.com

（B）cc.xnet50traps.paloaltonetworks.com

（C）cc-xnet.traps.paloaltonetworks.com

（D）xnettraps.paloaltonetworks.com

（E）ch-xnet.traps.paloaltonetworks.com

（F）hc-xnet50.traps.paloaltonetworks.com

正解：A、C、E 解答を投票する

質問 4

A customer is hesitant to directly connect their network to the Cortex platform due to compliance restrictions.
Which deployment method should the customer use to ensure secure connectivity between their network and the Cortex platform?

（A）Broker VM

（B）Syslog collector

（C）Windows Event Collector

（D）Elasticsearch

正解：A 解答を投票する

質問 5

Which source provides data for Cortex XDR?

（A）VMware NSX

（B）Linux endpoints

（C）Cisco ACI

（D）Amazon Alexa rank indicator

正解：B 解答を投票する

質問 6

The prospect is deciding whether to go with a phishing or a ServiceNow use case as part of their POC We have integrations for both but a playbook for phishing only Which use case should be used for the POC?

（A）phishing

（B）neither

（C）either

（D）ServiceNow

正解：A 解答を投票する

質問 7

Which feature of Cortex XSIAM helps analyst reduce the noise and false positives that often plague traditional SIEM systems?

（A）Automatic incident scoring

（B）Dynamic alarm fields

（C）Alert range indicators

（D）AI-generated correlation rules

正解：D 解答を投票する

質問 8

A customer has purchased Cortex Data Lake storage with the following configuration, which requires 2 TB of Cortex Data Lake to order:
- support for 300 total Cortex XDR clients all forwarding Cortex XDR
data with 30-day retention
- storage for higher fidelity logs to support Cortex XDR advanced
analytics
The customer now needs 1000 total Cortex XDR clients, but continues with 300 clients forwarding Cortex XDR data with 30-day retention.
What is the new total storage requirement for Cortex Data Lake storage to order?

（A）2 TB

（B）16 TB

（C）4 TB

（D）8 TB

正解：A 解答を投票する

質問 9

What is a key difference between audit users and full users in Cortex XSOAR?

（A）Audit users can only view incidents, while full users can edit system components.

（B）Audit users have read-only permission, white full users have read-write permission.

（C）Full users can only view dashboards, while audit users can investigate incidents.

（D）Audit users can run scripts and playbooks, while full users can only view reports.

正解：B 解答を投票する

質問 10

What is a benefit of user entity behavior analytics (UEBA) over security information and event management (SIEM)?

（A）UEBA establishes a secure connection in which endpoints can be routed, and it collects and forwards logs and files for analysis.

（B）SIEMs have difficulty detecting unknown or advanced security threats that do not involve malware, such as credential theft.

（C）SIEMs supports only agentless scanning, not agent-based workload protection across VMs, containers/Kubernetes.

（D）UEBA can add trusted signers of Windows or Mac processes to a whitelist in the Endpoint Security Manager (ESM) Console.

正解：B 解答を投票する

PSE-Cortex 無料問題集「Palo Alto Networks System Engineer - Cortex Professional」

弊社を連絡する

関連リンク

トップ試験