Online Access Free PSE-Cortex Exam Questions

Which two filter operators are available in Cortex XDR? (Choose two.)

• A.=>
• B.not Contains
• C.< >
• D.!*

In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )

• A.domain/workgroup membership
• B.hostname
• C.alert root cause
• D.OS
• E.presence of Flash executable

In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)

• A.quarantine status
• B.attack threat intelligence tag
• C.hostname
• D.OS
• E.Domain/workgroup membership

What is the difference between the intel feed's license quotas of Cortex XSOAR Starter Edition and Cortex XSOAR (SOAR + TIM)?

• A.In Cortex XSOAR (SOAR + TIM), intelligence detail view and relationships data are not included.
• B.In Cortex XSOAR (SOAR + TIM), Unit 42 Intelligence is not included.
• C.Cortex XSOAR Started Edition has unlimited access to the Threat Intel Library.
• D.Cortex XSOAR Starter Edition includes up to 5 active feeds and 100 indicators/fetch.

What are two ways Cortex XSIAM monitors for issues with data ingestion? (Choose two.)

• A.It automatically runs a copilot playbook to troubleshoot and resolve ingestion issues.
• B.The Data Ingestion Health page identifies deviations from normal patterns of log collection
• C.The tenant's compute units consumption will change dramatically, indicating a collection issue.
• D.The Cortex XSIAM Command Center dashboard will display a red icon if a data source is having issues.