- All Exams Instant Download
Which task setting allows context output to a specific key?
Which task setting allows context output to a specific key? a. Extend context b. Task output c. Stop on errors d. tagsView AnswerAnswer: A
Which two types of indicators of compromise (IOCs) are available for creation in Cortex XDR?
Which two types of indicators of compromise (IOCs) are available for creation in Cortex XDR? a. Registry b. Hostname c. Hash d. File pathView AnswerAnswer: C.D
What allows the use of predetermined Palo Alto Networks roles to assign access rights to Cortex XDR users?
What allows the use of predetermined Palo Alto Networks roles to assign access rights to Cortex XDR users? a. Restrictions security profile b. Cloud identity engine (CIE) c. Endpoint groups d. role-based access control (RBAC)View AnswerAnswer: D
The Cortex XDR management service requires which other Palo Alto Networks product?
The Cortex XDR management service requires which other Palo Alto Networks product? a. Cortex Data Lake b. Directory Sync c. Panorama d. Cortex XSOARView AnswerAnswer: A
Which service helps uncover attackers wherever they hide by combining world-class threat hunters with Cortex XDR technology that runs on integrated endpoint, network, and cloud data sources?
Which service helps uncover attackers wherever they hide by combining world-class threat hunters with Cortex XDR technology that runs on integrated endpoint, network, and cloud data sources? a. Cloud Identity Engine (CIE) b. Threat Intelligence Platform (TIP) c. Virtual desktop infrastructure (VDI) d. Managed Threat Hunting (MTH)View AnswerAnswer: D
What is the best method to block this IP from communicating with endpoints without requiring a configuration change on the firewall?
Cortex XSOAR has extracted a malicious Internet Protocol (IP) address involved in command-and-control (C2) traffic. What is the best method to block this IP from communicating with endpoints without requiring a configuration change on the firewall? a. Have XSOAR automatically add the IP address to a deny rule in the...
What integration allows searching and displaying Splunk results within Cortex XSOAR?
What integration allows searching and displaying Splunk results within Cortex XSOAR? a. Demisto App for Splunk integration b. SplunkPY integration c. Splunk integration d. XSOAR REST API integrationView AnswerAnswer: B
Which component displays an entire picture of an attack, including the root cause or delivery point?
Which component displays an entire picture of an attack, including the root cause or delivery point? a. Cortex XSOAR Work Plan b. Cortex Data Lake c. Cortex XDR Causality View d. Cortex SOC OrchestratorView AnswerAnswer: C
What is the size of the free Cortex Data Lake instance provided to a customer who has activated a TMS tenant, but has not purchased a Cortex Data Lake instance?
What is the size of the free Cortex Data Lake instance provided to a customer who has activated a TMS tenant, but has not purchased a Cortex Data Lake instance? a. 10 TB b. 1 TB c. 100 GB d. 10 GBView AnswerAnswer: C
Which statement applies to a Cortex XSOAR engine that is part of a load-balancing group?
Which statement applies to a Cortex XSOAR engine that is part of a load-balancing group? a. It does not appear in the engine drop-down menu when configuring an integration instance b. It must be in a load-balancing group with at least three additional members c. It can be used separately...
