PSE-Cortex-Pro-24 試験問題を無料オンラインアクセス

Which solution profiles network behavior metadata, not payloads and files, allowing effective operation regardless of encrypted or unencrypted communication protocols, like HTTPS?

• A.Security Information and Event Management (SIEM)
• B.endpoint detection and response (EDR)
• C.endpoint protection platform (EPP)
• D.Network Detection and Response (NDR)

What is a benefit of user entity behavior analytics (UEBA) over security information and event management (SIEM)?

• A.UEBA can add trusted signers of Windows or Mac processes to a whitelist in the Endpoint Security Manager (ESM) Console.
• B.UEBA establishes a secure connection in which endpoints can be routed, and it collects and forwards logs and files for analysis.
• C.SIEMs have difficulty detecting unknown or advanced security threats that do not involve malware, such as credential theft.
• D.SIEMs supports only agentless scanning, not agent-based workload protection across VMs, containers
  /Kubernetes.

Where is the best place to find official resource material?

• A.Technical blogs
• B.Online forums
• C.Administrator's guide
• D.Video series

The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.) SUCCESS

• A.The modified script required a different parameter to run successfully.
• B.The dictionary was defined incorrectly in the second script.
• C.The modified script attempted to access a dictionary key that did not exist in the dictionary named
  "data"
• D.The modified scnpt was run in the wrong Docker image

What should be configured for a Cortex XSIAM customer who wants to automate the response to certain alerts?

• A.Data model rules
• B.Correlation rules
• C.Incident scoring
• D.Playbook triggers