PSE-Cortex Palo Alto Networks System Engineer - Cortex Professional Free Demo Questions – Try Before You Buy

Question 1

Which two items are stitched to the Cortex XDR causality chain'' (Choose two)

A

firewall alert

B

SIEM alert

C

full URL

D

registry set value

Correct Answer: A, C

Question 2

In addition to migration and go-live, what are two best-practice steps for migrating from SIEM to Cortex XSIAM? (Choose two.)

A

Execution

B

Certification

C

Conclusion

D

Testing

Correct Answer: C, D

Question 3

A Cortex XSOAR customer wants to ingest emails from a single mailbox. The mailbox brings in reported phishing emails and email requests from human resources (HR) to onboard new users. The customer wants to run two separate workflows from this mailbox, one for phishing and one for onboarding.
What will allow Cortex XSOAR to accomplish this in the most efficient way?

A

Create two instances of the email integration and classify one instance as ingesting incidents of type phishing and the other as ingesting incidents of type onboarding.

B

Use an incident classifier based on a field in each type of email to classify those containing " Phish Alert " in the subject as phishing and those containing " Onboard Request " as onboarding.

C

Create a playbook to process and determine incident type based on content of the email.

D

Use machine learning (ML) to determine incident type.

Correct Answer: B

Explanation:

[Reference: https://xsoar.pan.dev/docs/reference/packs/email-communication, , , ]

Demo Palo alto Networks PSE-Cortex Exam Questions

Which two items are stitched to the Cortex XDR causality chain'' (Choose two)

firewall alert

SIEM alert

full URL

registry set value

Correct Answer: A, C

In addition to migration and go-live, what are two best-practice steps for migrating from SIEM to Cortex XSIAM? (Choose two.)

Execution

Certification

Conclusion

Testing

Correct Answer: C, D

Create two instances of the email integration and classify one instance as ingesting incidents of type phishing and the other as ingesting incidents of type onboarding.

Use an incident classifier based on a field in each type of email to classify those containing " Phish Alert " in the subject as phishing and those containing " Onboard Request " as onboarding.

Create a playbook to process and determine incident type based on content of the email.

Use machine learning (ML) to determine incident type.

Correct Answer: B

Demo Practice Mode