Free Palo Alto Networks PSE-Cortex-Pro-24 Exam Dumps Questions & Answers

What is the requirement for enablement of endpoint and network analytics in Cortex XDR?

• A.Cloud Identity Engine configured and enabled
• B.Network Mapper applet on the Broker VM configured and enabled
• C.Logs from at least 30 endpoints over a minimum of two weeks
• D.Windows DHCP logs ingested via a Cortex XDR collector

Why is reputation scoring important in the Threat Intelligence Module of Cortex XSOAR?

• A.It helps identify threat intelligence vendors with substandard content.
• B.It deconflicts prioritization when two vendors give different scores for the same indicator.
• C.It provides a mathematical model for combining scores from multiple vendors.
• D.It allows for easy comparison between open-source intelligence and paid services.

When initiated, which Cortex XDR capability allows immediate termination of the process-or entire process tree-on an anomalous process discovered during investigation of a security event?

• A.Live sensors
• B.Log forwarding
• C.Live terminal
• D.Log stitching

A customer is hesitant to directly connect their network to the Cortex platform due to compliance restrictions.
Which deployment method should the customer use to ensure secure connectivity between their network and the Cortex platform?

• A.Elasticsearch
• B.Windows Event Collector
• C.Syslog collector
• D.Broker VM

Which command-line interface (CLI) query would retrieve the last three Splunk events?

• A.!search using=splunk_instance_1 query="* | last 3"
• B.!search using=splunk_instance_1 query="* | 3"
• C.!query using=splunk_instance_1 query="* | last 3"
• D.!search using=splunk_instance_1 query="* | head 3"