PSE-Cortex-Pro-24試験無料問題集（170題）「Palo Alto Networks Systems Engineer Professional

出題：1

Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?

A. Agent Management

B. Device Control

C. Device Customization

D. Agent Configuration

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which attack method is a result of techniques designed to gain access through vulnerabilities in the code of an operating system (OS) or application?

A. exploit

B. phishing

C. ransomware

D. malware

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

A Cortex Xpanse customer receives an email regarding an upcoming product update and wants to get more information on the new features.
In which resource can the customer access this information?

A. Compatibility Matrix

B. Administrator Guide

C. Release Notes

D. LIVEcommunitv

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Cortex XSOAR has extracted a malicious Internet Protocol (IP) address involved in command-and-control (C2) traffic.
What is the best method to block this IP from communicating with endpoints without requiring a configuration change on the firewall?

A. Have XSOAR automatically add the IP address to an external dynamic list (EDL) used by the firewall.

B. Have XSOAR automatically add the IP address to a threat intelligence management (TIM) malicious IP list to elevate priority of future alerts.

C. Have XSOAR automatically create a NetOps ticket requesting a configuration change to the firewall to block the IP.

D. Have XSOAR automatically add the IP address to a deny rule in the firewall.

正解：A 解答を投票する

出題：5

Which statement applies to the malware protection flow of the endpoint agent in Cortex XSIAM?

A. Hash comparisons come after local static analysis.

B. The block list is verified in the final step.

C. A tile from an allowed signer is exempt from local analysis.

D. Local analysis always happens before a WildFire verdict check.

正解：C 解答を投票する

出題：6

Which process in the causality chain does the Cortex XDR agent identify as triggering an event sequence?

A. the chain's alert initiator

B. the relevant shell

C. the adversary's remote process

D. The causality group owner

正解：D 解答を投票する

出題：7

What does Cortex Xpanse ingest from XDR endpoints?

A. Public IP addresses

B. MAC addresses

C. Hostnames

D. User-agent data

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Why is Premium Customer Success an important part of any Cortex bill of materials?

A. It provides full implementation services.

B. It provides expert-led configuration guidance.

C. It provides instructor-led training courses.

D. It provides managed threat hunting

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

What must a customer deploy prior to collecting endpoint data in Cortex XSIAM?

A. Playbook

B. XDR agent

C. External dynamic list

D. Broker VM

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

Which command-line interface (CLI) query would retrieve the last three Splunk events?

A. !search using=splunk_instance_1 query="* | head 3"

B. !search using=splunk_instance_1 query="* | last 3"

C. !query using=splunk_instance_1 query="* | last 3"

D. !search using=splunk_instance_1 query="* | 3"

正解：A 解答を投票する

出題：11

What does DBot use to score an indicator that has multiple reputation scores?

A. average score

B. most severe score

C. undefined score

D. least severe score

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：12

A test for a Microsoft exploit has been planned. After some research Internet Explorer 11 CVE-2016-0189 has been selected and a module in Metasploit has been identified (exploit/windows/browser/ms16_051_vbscript) The description and current configuration of the exploit are as follows;