Free Palo Alto Networks PSE-Cortex Exam Dumps Questions & Answers

What is a key difference between audit users and full users in Cortex XSOAR?

• A.  Full users can only view dashboards, while audit users can investigate incidents.
• B.  Audit users have read-only permission, white full users have read-write permission.
• C.  Audit users can run scripts and playbooks, while full users can only view reports.
• D.  Audit users can only view incidents, while full users can edit system components.

A customer wants to modify the retention periods of their Threat logs in Cortex Data Lake.
Where would the user configure the ratio of storage for each log type?

• A.  It is not possible to configure Cortex Data Lake quota for specific log types.
• B.  Write a GPO for each endpoint agent to check in less often
• C.  Go to the Cortex Data Lake App in Cloud Services, then choose Configuration and modify the Threat Quota
• D.  Within the TMS, create an agent settings profile and modify the Disk Quota value

Which playbook functionality allows grouping of tasks to create functional building blocks?

• A.  conditional tasks
• B.  playbook features
• C.  sub-playbooks
• D.  manual tasks

Approximately how many Cortex XSOAR marketplace integrations exist?

• A.  Between 1-400
• B.  Between 700-2000
• C.  Between 400-700
• D.  Over 2000

In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?

• A.  enable the docker service
• B.  create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group
• C.  create a "docker" group and add the "Cortex XSOAR" or "demisto" user to this group
• D.  disable the Cortex XSOAR service