We're so confident of our products that we provide no hassle product exchange.
Palo Alto Networks PSE-Cortex-Pro-24 Exam Overview:
| Certification Vendor: | Palo Alto Networks |
| Exam Name: | Palo Alto Networks Systems Engineer Professional - Cortex |
| Exam Number: | PSE-Cortex-Pro-24 |
| Available Languages: | English |
| Related Certifications: | Palo Alto Networks Systems Engineer (PSE) |
| Exam Format: | Multiple Choice, Matching, Ordering |
| Sample Questions: | Palo Alto Networks PSE-Cortex-Pro-24 Sample Questions |
| Exam Way: | Online or Testing Center |
| Official Syllabus URL: | https://www.pearsonvue.com/us/en/paloaltonetworks.html |
Palo Alto Networks PSE-Cortex-Pro-24 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Incident Response | - Security Incident Management
|
| Topic 2: Cortex Platform Deployment and Installation | - Deploying Cortex Platform
|
| Topic 3: Threat Hunting Services | - Threat Hunting Operations
|
| Topic 4: SIEM Management | - Security Event Monitoring
|
| Topic 5: Third-party Logs and Feeds | - Threat Intelligence Integration
|
| Topic 6: Cortex XDR | - Endpoint Detection and Threat Analysis
|
| Topic 7: Cortex XSOAR | - Security Automation
|
Palo Alto Networks Systems Engineer Professional - Cortex Sample Questions:
1. In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?
A) disable the Cortex XSOAR service
B) enable the docker service
C) create a "docker" group and add the "Cortex XSOAR" or "demisto" user to this group
D) create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group
2. How can you view all the relevant incidents for an indicator?
A) Related Indicators column in Incident Screen
B) Linked Incidents column in Indicator Screen
C) Related Incidents column in Indicator Screen
D) Linked Indicators column in Incident Screen
3. In addition to migration and go-live, what are two best-practice steps for migrating from SIEM to Cortex XSIAM? (Choose two.)
A) Execution
B) Conclusion
C) Testing
D) Certification
4. Which statement applies to the malware protection flow of the endpoint agent in Cortex XSIAM?
A) Hash comparisons come after local static analysis.
B) A tile from an allowed signer is exempt from local analysis.
C) Local analysis always happens before a WildFire verdict check.
D) The block list is verified in the final step.
5. What method does the Traps agent use to identify malware during a scheduled scan?
A) Local analysis
B) WildFire hash comparison and dynamic analysis
C) Heuristic analysis
D) Signature comparison
Solutions:
| Question # 1 Answer: C | Question # 2 Answer: C | Question # 3 Answer: B,C | Question # 4 Answer: B | Question # 5 Answer: B |
By Xavier
