System Engineer - Cortex Professional Exam Questions PDF download

QUESTION: 6

In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?

create a "docker" group and add the "Cortex XSOAR" or "demisto" user to this group
create a "Cortex XSOAR' or "demisto" group and add the "docker" user to this group
disable the Cortex XSOAR service
enable the docker service

Answer(s): B

Reveal Solution Next Question

QUESTION: 7

An administrator of a Cortex XDR protected production environment would like to test its ability to protect users from a known flash player exploit.

What is the safest way to do it?

The administrator should attach a copy of the weapomzed flash file to an email, send the email to a selected group of employees, and monitor the Events tab on the Cortex XDR console
The administrator should use the Cortex XDR tray icon to confirm his corporate laptop is fully protected then open the weaponized flash file on his machine, and monitor the Events tab on the Cortex XDR console.
The administrator should create a non-production Cortex XDR test environment that accurately represents the production environment, introduce the weaponized flash file, and monitor the Events tab on the Cortex XDR console.
The administrator should place a copy of the weaponized flash file on several USB drives, scatter them around the office and monitor the Events tab on the Cortex XDR console

Answer(s): A

Reveal Solution Next Question

QUESTION: 8

"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?

#Bob
/invite Bob
@Bob
!invite Bob

Answer(s): A

Reveal Solution Next Question

QUESTION: 9

An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project's operational considerations'?

endpoint manager
SOC manager
SOC analyst
desktop engineer

Answer(s): C

Reveal Solution Next Question

QUESTION: 10

When analyzing logs for indicators, which are used for only BIOC identification'?

observed activity
artifacts
techniques
error messages

Answer(s): A

Reveal Solution Next Question

Palo Alto Networks System Engineer - Cortex Professional PSE-Cortex Dumps in PDF

Free Palo Alto Networks PSE-Cortex Real Questions (page: 12)

QUESTION: 6

QUESTION: 7

QUESTION: 8

QUESTION: 9

QUESTION: 10