[2023] PSE-Cortex.pdf – Questions Answers PDF Sample Questions Reliable [Q32-Q56]

NO.32 An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project’s operational considerations’?

NO.33 The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.) SUCCESS

NO.34 How does an “inline” auto-extract task affect playbook execution?

NO.35 In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?

NO.36 How can you view all the relevant incidents for an indicator?

NO.37 Which two entities can be created as a BIOC? (Choose two.)

NO.38 Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)

NO.39 Which Cortex XDR capability extends investigations to an endpoint?

NO.40 The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?

NO.41 How do sub-playbooks affect the Incident Context Data?

NO.42 Which two formats are supported by Whitelist? (Choose two)

NO.43 During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation – Step 2 of 2 window.

During the service instance provisioning which three DNS host names are created? (Choose three.)

NO.44 What are two manual actions allowed on War Room entries? (Choose two.)

NO.45 Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)

NO.46 When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?

NO.47 How many use cases should a POC success criteria document include?

NO.48 If an anomalous process is discovered while investigating the cause of a security event, you can take immediate action to terminate the process or the whole process tree, and block processes from running by initiating which Cortex XDR capability?

NO.49 Which option describes a Load-Balancing Engine Group?

NO.50 Which Cortex XDR capability extends investigations to an endpoint?

NO.51 Which four types of Traps logs are stored within Cortex Data Lake?

NO.52 When a Demisto Engine is part of a Load-Balancing group it?

NO.53 Which task allows the playbook to follow different paths based on specific conditions?

NO.54 If you have a playbook task that errors out. where could you see the output of the task?

NO.55 The certificate used for decryption was installed as a trusted toot CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console.What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?

NO.56 In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)