Free Palo Alto Networks PSE-Cortex Exam Dumps Questions & Answers

Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?

• A.  Agent Configuration
• B.  Device Customization
• C.  Agent Management
• D.  Device Control

Which type of log is ingested natively in Cortex XDR Pro per TB?

• A.  Demisto
• B.  Google Kubernetes Engine
• C.  Docker
• D.  Microsoft Office 365

Which command-line interface (CLI) query would retrieve the last three Splunk events?

• A.  !search using=splunk_instance_1 query="* | head 3"
• B.  !search using=splunk_instance_1 query="* | last 3"
• C.  !search using=splunk_instance_1 query="* | 3"
• D.  !query using=splunk_instance_1 query="* | last 3"

Which element displays an entire picture of an attack, including the root cause or delivery point?

• A.  Cortex SOC Orchestrator
• B.  Cortex Data Lake
• C.  Cortex XDR Causality View
• D.  Cortex XSOAR Work Plan

A customer wants to modify the retention periods of their Threat logs in Cortex Data Lake.
Where would the user configure the ratio of storage for each log type?

• A.  Write a GPO for each endpoint agent to check in less often
• B.  Within the TMS, create an agent settings profile and modify the Disk Quota value
• C.  Go to the Cortex Data Lake App in Cloud Services, then choose Configuration and modify the Threat Quota
• D.  It is not possible to configure Cortex Data Lake quota for specific log types.