PSE-Cortex 無料問題集「Palo Alto Networks System Engineer - Cortex Professional」

（A）To manage multiple Cortex XSOAR tenants

（B）To execute playbooks, scripts, commands, and integrations

（C）To provide a user interface for security analysts

（D）To store and manage incident data, remediation plans, and documentation

（A）Upload an external file named "whitelist" to the Whitelist page.

（B）Click "New Whitelisted Indicator" in the Whitelist page.

（C）Upload an external file named "whitelist" to the Indicators page.

（D）Select the indicators and click "Delete and Whitelist" in the Indicators page.

（A）It can automatically email staff to warn them about the phishing attack and show them a copy of the email

（B）It can automatically purge the email from user mailboxes in which it has not yet opened

（C）It can automatically identify every mailbox that received the phish and create corresponding cases for them

（D）It can automatically respond to the phishing email to unsubscribe from future emails

（A）Monitoring endpoint activity, managing firewall rules, and mitigating cybersecurity threats

（B）Identifying office network vulnerabilities, monitoring remote workforce, and encrypting data

（C）Analyzing global scan data, identifying risky issues on remote networks, and providing internal insights

（D）Gathering endpoint data, conducting internal scans, and automating network configurations

（A）SIEM has access to raw logs from agents, where Cortex XDR traditionally only gets alerts.

（B）Cortex XDR requires a large and diverse team of analysts and up to several weeks for simple actions like creating an alert.

（C）Cortex XDR allows just logging into the console and out of the box the events were blocked as a proactive approach.

（D）SIEM has been entirely designed and built as cloud-native, with the ability to stitch together cloud logs, on-premises logs, third-party logs, and endpoint logs.

（A）Run a known 2015 flash exploit on a Windows XP SP3 VM. and run an exploitation tool that acts as a listener Use the results to demonstrate Traps capabilities

（B）Run word processing exploits in a latest version of Windows VM in a controlled and isolated environment. Document indicators of compromise and compare to Traps protection capabilities

（C）Prepare the latest version of Windows VM Gather information about the word processing applications, determine if some of them are vulnerable and prepare a working exploit for at least one of them Execute with an exploitation tool

（D）Gather information about the word processing applications and run them on a Windows XP SP3 VM Determine if any of the applications are vulnerable and run the exploit with an exploitation tool

（A）create a "docker" group and add the "Cortex XSOAR" or "demisto" user to this group

（B）enable the docker service

（C）create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group

（D）disable the Cortex XSOAR service

（A）It resolves conflicting scores from different vendors with the same indicator.

（B）It provides a statistical model for combining scores from multiple vendors.

（C）It helps identify threat feed vendors with invalid content.

（D）It allows for comparison between open-source intelligence and paid services.

（A）Building out an executive-level proposal detailing the product capabilities

（B）Gathering a list of the different integrations that will need to be configured

（C）Planning for every different use case the customer has for the solution

（D）Ensuring that the customer has single sign-on (SSO) configured in their environment

（A）External dynamic list

（B）XDR agent

（C）Broker VM

（D）Playbook