PSE-Cortex-Pro-24 試験問題を無料オンラインアクセス

An EDR project was initiated by a CISO. Which resource will likely have the most heavy influence on the project?

• A.operations manager
• B.SOC manager
• C.SOC analyst IT
• D.desktop engineer

An existing Palo Alto Networks SASE customer expresses that their security operations practice is having difficulty using the SASE data to help detect threats in their environment. They understand that parts of the Cortex portfolio could potentially help them and have reached out for guidance on moving forward.
Which two Cortex products are good recommendation for this customer? (Choose two.)

• A.Cortex XSIAM
• B.Cortex
• C.Cortex XDR
• D.Cortex XSOAR

A Cortex XSOAR customer wants to ingest emails from a single mailbox. The mailbox brings in reported phishing emails and email requests from human resources (HR) to onboard new users. The customer wants to run two separate workflows from this mailbox, one for phishing and one for onboarding.
What will allow Cortex XSOAR to accomplish this in the most efficient way?

• A.Create two instances of the email integration and classify one instance as ingesting incidents of type phishing and the other as ingesting incidents of type onboarding.
• B.Use machine learning (ML) to determine incident type.
• C.Create a playbook to process and determine incident type based on content of the email.
• D.Use an incident classifier based on a field in each type of email to classify those containing "Phish Alert" in the subject as phishing and those containing "Onboard Request" as onboarding.

Which service helps identify attackers by combining world-class threat intelligence with Cortex XSIAM technology?

• A.Cloud Identity Engine
• B.Threat Intelligence Platform
• C.Managed Threat Hunting
• D.Virtual Desktop Infrastructure

An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )

• A.Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
• B.With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module
• C.Contact support and ask for a security exception.
• D.In the Cortex XDR security event, review the specific parent process, child process, and command line arguments