In the DBotScore context field, which context key would differentiate between multiple entries for the same indicator in a multi-TIP environment?A . VendorB . TypeC . UsingD . BrandView AnswerAnswer: A
The certificate used for decryption was installed as a trusted root CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console What action needs to be taken if the...
A customer wants to modify the retention periods of their Threat logs in Cortex Data Lake. Where would the user configure the ratio of storage for each log type?A . Within the TMS, create...
What are process exceptions used for?A . whitelist programs from WildFire analysisB . permit processes to load specific DLLsC . change the WildFire verdict for a given executableD . disable an EPM for a...
What is the retention requirement for Cortex Data Lake sizing?A . number of endpointsB . number of VM-Series NGFWC . number of daysD . logs per secondView AnswerAnswer: C Explanation: https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-cortex-data-lake/set-log-storage-quota
Which two log types should be configured for firewall forwarding to the Cortex Data Lake for use by Cortex XDR? (Choose two)A . Security EventB . HIPC . CorrelationD . AnalyticsView AnswerAnswer: A,B
Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types? (Choose three.)A . Define whether a playbook runs automatically when an incident type is encounteredB . Set reminders...
Which task allows the playbook to follow different paths based on specific conditions?A . ConditionalB . AutomationC . ManualD . ParallelView AnswerAnswer: A
Which step is required to prepare the VDI Golden Image?A . Review any PE files that WildFire determined to be maliciousB . Ensure the latest content updates are installedC . Run the VDI conversion...
An EDR project was initiated by a CISO. Which resource will likely have the most heavy influence on the project?A . desktop engineerB . SOC managerC . SOC analyst ITD . operations managerView AnswerAnswer:...
