Online Access Free PSE-Cortex Exam Questions

Which two Cortex XSOAR incident type features can be customized under Settings > Advanced > Incident Types? (Choose two.)

• A.setting reminders for an incident service level agreement
• B.defining whether a playbook runs automatically when an incident type is encountered
• C.dropping new incidents of the same type that contain similar information
• D.adding new fields to an incident type

What is a requirement when integrating Cortex XSIAM or Cortex XDR with other Palo Alto Networks products?

• A.HTTP Collector
• B.XDR/XSIAM Broker VM
• C.Advanced logging service license
• D.Devices in the same region as XDR/XSIAM

When preparing the golden image in a Cortex XDR Virtual Desktop Infrastructure (VDI) deployment, which step is required?

• A.Launch the VDI conversion tool.
• B.Scan the image using the imagepreptool.
• C.Disable automatic memory dumps.
• D.Enable the VDI license timeout.

Which statement applies to the differentiation of Cortex XDR from security information and event management (SIEM)?

• A.Cortex XDR requires a large and diverse team of analysts and up to several weeks for simple actions like creating an alert.
• B.SIEM has access to raw logs from agents, where Cortex XDR traditionally only gets alerts.
• C.SIEM has been entirely designed and built as cloud-native, with the ability to stitch together cloud logs, on-premises logs, third-party logs, and endpoint logs.
• D.Cortex XDR allows just logging into the console and out of the box the events were blocked as a proactive approach.

How can you view all the relevant incidents for an indicator?

• A.Linked Indicators column in Incident Screen
• B.Linked Incidents column in Indicator Screen
• C.Related Incidents column in Indicator Screen
• D.Related Indicators column in Incident Screen