PSE-CORTEX Online Practice Questions and Answers

Which option describes a Load-Balancing Engine Group?

A. A group of engines that use an algorithm to efficiently share the workload for integrations

B. A group of engines that ensure High Availability of Demisto backend databases.

C. A group of engines that use an algorithm to efficiently share the workload for automation scripts

D. A group of D2 agents that share processing power across multiple endpoints

During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.

During the service instance provisioning which three DNS host names are created? (Choose three.)

A. cc-xnet50.traps.paloaltonetworks.com

B. hc-xnet50.traps.paloaltonetworks.com

C. cc-xnet.traps.paloaltonetworks.com

D. cc.xnet50traps.paloaltonetworks.com

E. xnettraps.paloaltonetworks.com

F. ch-xnet.traps.paloaltonetworks.com

Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?

Desmisto REST API

Name: Demisto REST API_instance_1

Demisto Server URL: https://127.0.0.1

Demisto Server API Key: *******

User system proxy settings

Use sigle engine: No engine

! Script failed to run: Demisto REST APIs-

Request Failed.

Status code:1

Body:{"StatusCode":-1,"Status":"Get https://127.0.0.1/user:x509;cannot validate certificate for 127.0.0.1 because it doesn't contain any IP SANs","Cookies":

[],"Body":"","Bytes":[],"Headers":{},"Path":"}, at sendRequest(script:59:23(79)):(2603)

Which two playbook functionalities allow looping through a group of tasks during playbook execution? (Choose two.)

A. Generic Polling Automation Playbook

B. Playbook Tasks

C. Sub-Play books

D. Playbook Functions

What is the result of creating an exception from an exploit security event?

A. White lists the process from Wild Fire analysis

B. exempts the user from generating events for 24 hours

C. exempts administrators from generating alerts for 24 hours

D. disables the triggered EPM for the host and process involve

How do sub-playbooks affect the Incident Context Data?

A. When set to private, task outputs do not automatically get written to the root context

B. When set to private, task outputs automatically get written to the root context

C. When set to global, allows parallel task execution.

D. When set to global, sub-playbook tasks do not have access to the root context

Which two types of lOCs are available for creation in Cortex XDR? (Choose two.)

A. IP

B. endpoint hostname

C. domain

D. registry entry

Which step is required to prepare the VDI Golden Image?

A. Review any PE files that WildFire determined to be malicious

B. Ensure the latest content updates are installed

C. Run the VDI conversion tool

D. Set the memory dumps to manual setting

The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.)

A. The modified scnpt was run in the wrong Docker image

B. The modified script required a different parameter to run successfully.

C. The dictionary was defined incorrectly in the second script.

D. The modified script attempted to access a dictionary key that did not exist in the dictionary named "data"

Which two filter operators are available in Cortex XDR? (Choose two.)

A. not Contains

B. !*

C. =>

D. < >

Which two items are stitched to the Cortex XDR causality chain'' (Choose two)

A. firewall alert

B. SIEM alert

C. full URL

D. registry set value