Palo Alto Networks Systems Engineer Professional - Cortex (PSE-Cortex-Pro-24) Free Practice Test

Question 1

A Cortex XSOAR customer has a phishing use case in which a playbook has been implemented with one of the steps blocking a malicious URL found in an email reported by one of the users.
What would be the appropriate next step in the playbook?

A. Disable the user's email account.

B. Change the user's password.

C. Email the user to confirm the reported email was phishing.

D. Email the CISO to advise that malicious email was found.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Why is it important to document notes from the Proof of Value (POV) for post-sales hand off?

A. To certify that the POV was completed and meets all customer requirements

B. To generate additional training material for the POV's production implementation

C. To ensure the implementation teams understand the customer use cases and priorities

D. To allow implementation teams to bypass scooping exercises and shorten delivery time

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

How does a clear understanding of a customer's technical expertise assist in a hand off following the close of an opportunity?

A. It enables customers to prepare for audits so they can demonstrate compliance.

B. It helps in assigning additional technical tasks to the customer

C. It allows implementation teams to bypass initial scoping exercises

D. It enables post-sales teams to tailor their support and training appropriately

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Which task setting allows context output to a specific key?

A. extend context

B. stop on errors

C. lags

D. task output

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which step is required to prepare the VDI Golden Image?

A. Ensure the latest content updates are installed

B. Set the memory dumps to manual setting

C. Run the VDI conversion tool

D. Review any PE files that WildFire determined to be malicious

Correct Answer: D

Question 6

Which product enables the discovery, exchange, and contribution of security automation playbooks, built into Cortex XSOAR?

A. XSOAR Marketplace

B. XSOAR Ticketing Systems

C. XSOAR Threat Intelligence Platform (TIP)

D. XSOAR Automated Systems

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

In addition to incident volume, which four critical factors must be evaluated to determine effectiveness and ROI on cybersecurity planning and technology?

A. People, staffing costs, duplicates, false positives

B. Standard operating procedures, staffing costs, duplicates, mean time to respond

C. Analyst, training costs, duplicated, false positives

D. People, security controls, mean time to detect, false positives

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

An existing Palo Alto Networks SASE customer expresses that their security operations practice is having difficulty using the SASE data to help detect threats in their environment. They understand that parts of the Cortex portfolio could potentially help them and have reached out for guidance on moving forward.
Which two Cortex products are good recommendation for this customer? (Choose two.)

A. Cortex

B. Cortex XSIAM

C. Cortex XDR

D. Cortex XSOAR

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Which feature of Cortex XSIAM displays an entire picture of an attack, including the originating process or delivery point?

A. Sample analysis

B. Causality View

C. Automation playbook

D. Correlation rule

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

When a Demisto Engine is part of a Load-Balancing group it?

A. Must be in a Load-Balancing group with at least another 3 members

B. Cannot be used separately and does not appear in the in the engines drop-down menu when configuring an integration instance

C. Can be used separately as an engine, only if connected to the Demisto Server directly

D. It must have port 443 open to allow the Demisto Server to establish a connection

Correct Answer: D

Question 11

Which statement applies to the differentiation of Cortex XDR from security information and event management (SIEM)?

A. Cortex XDR allows just logging into the console and out of the box the events were blocked as a proactive approach.

B. SIEM has been entirely designed and built as cloud-native, with the ability to stitch together cloud logs, on-premises logs, third-party logs, and endpoint logs.

C. SIEM has access to raw logs from agents, where Cortex XDR traditionally only gets alerts.

D. Cortex XDR requires a large and diverse team of analysts and up to several weeks for simple actions like creating an alert.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Palo Alto Networks Systems Engineer Professional - Cortex (PSE-Cortex-Pro-24) Free Practice Test