Free Palo Alto Networks PSE-Cortex Exam Dumps Questions & Answers

Which product enables the discovery, exchange, and contribution of security automation playbooks, built into Cortex XSOAR?

• A.  XSOAR Marketplace
• B.  XSOAR Threat Intelligence Platform (TIP)
• C.  XSOAR Ticketing Systems
• D.  XSOAR Automated Systems

Which attack method is a result of techniques designed to gain access through vulnerabilities in the code of an operating system (OS) or application?

• A.  ransomware
• B.  malware
• C.  exploit
• D.  phishing

What is the difference between the intel feed's license quotas of Cortex XSOAR Starter Edition and Cortex XSOAR (SOAR + TIM)?

• A.  Cortex XSOAR Started Edition has unlimited access to the Threat Intel Library.
• B.  In Cortex XSOAR (SOAR + TIM), intelligence detail view and relationships data are not included.
• C.  Cortex XSOAR Starter Edition includes up to 5 active feeds and 100 indicators/fetch.
• D.  In Cortex XSOAR (SOAR + TIM), Unit 42 Intelligence is not included.

A customer wants to modify the retention periods of their Threat logs in Cortex Data Lake.
Where would the user configure the ratio of storage for each log type?

• A.  Within the TMS, create an agent settings profile and modify the Disk Quota value
• B.  It is not possible to configure Cortex Data Lake quota for specific log types.
• C.  Write a GPO for each endpoint agent to check in less often
• D.  Go to the Cortex Data Lake App in Cloud Services, then choose Configuration and modify the Threat Quota

Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types?
(Choose three.)

• A.  Set reminders for an incident SLA
• B.  Define the way that incidents of a specific type are displayed in the system
• C.  Drop new incidents of the same type that contain similar information
• D.  Add new fields to an incident type
• E.  Define whether a playbook runs automatically when an incident type is encountered