Online Access Free PSE-Cortex-Pro-24 Exam Questions

Which two entities can be created as a behavioral indicator of compromise (BIOC)? (Choose two.)

• A.data
• B.network
• C.event alert
• D.process

Which two methods does the Cortex XDR agent use to identify malware during a scheduled scan? (Choose two.)

• A.signature comparison
• B.WildFire hash comparison
• C.heuristic analysis
• D.dynamic analysis

A General Purpose Dynamic Section can be added to which two layouts for incident types? (Choose two)

• A.Incident Quick View
• B."Close" Incident Form
• C."New"/Edit" Incident Form
• D.Incident Summary

An administrator has a critical group of systems running Windows XP SP3 that cannot be upgraded The administrator wants to evaluate the ability of Traps to protect these systems and the word processing applications running on them How should an administrator perform this evaluation?

• A.Run a known 2015 flash exploit on a Windows XP SP3 VM. and run an exploitation tool that acts as a listener Use the results to demonstrate Traps capabilities
• B.Prepare the latest version of Windows VM Gather information about the word processing applications, determine if some of them are vulnerable and prepare a working exploit for at least one of them Execute with an exploitation tool
• C.Run word processing exploits in a latest version of Windows VM in a controlled and isolated environment. Document indicators of compromise and compare to Traps protection capabilities
• D.Gather information about the word processing applications and run them on a Windows XP SP3 VM Determine if any of the applications are vulnerable and run the exploit with an exploitation tool

Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?

Which two playbook functionalities allow looping through a group of tasks during playbook execution?
(Choose two.)

• A.Playbook Functions
• B.Generic Polling Automation Playbook
• C.Sub-Play books
• D.Playbook Tasks