Free PSE-Cortex Exam Braindumps
Palo Alto Networks System Engineer - Cortex Professional Questions 16–20 (page: 5)

Updated On: 10-Feb-2026

Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types?
(Choose three.)

  1. Define whether a playbook runs automatically when an incident type is encountered
  2. Set reminders for an incident SLA
  3. Add new fields to an incident type
  4. Define the way that incidents of a specific type are displayed in the system
  5. Drop new incidents of the same type that contain similar information

Answer(s): A,D,E



Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?

  1. Agent Configuration
  2. Device Control
  3. Device Customization
  4. Agent Management

Answer(s): B

Explanation:

https://live.paloaltonetworks.com/t5/blogs/cortex-xdr-features-introduced-in-december-2019/ba-p/302231



What is the result of creating an exception from an exploit security event?

  1. White lists the process from Wild Fire analysis
  2. exempts the user from generating events for 24 hours
  3. exempts administrators from generating alerts for 24 hours
  4. disables the triggered EPM for the host and process involve

Answer(s): D



Which two log types should be configuredfor firewall forwarding to the Cortex Data Lake for use by Cortex XDR?(Choose two)

  1. Security Event
  2. HIP
  3. Correlation
  4. Analytics

Answer(s): A,D



When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?

  1. splunk-get-alerts integration command
  2. Cortex XSOAR TA App for Splunk
  3. SplunkSearch automation
  4. SplunkGO integration

Answer(s): A



Viewing page 5 of 13
Viewing questions 21 - 25 out of 168 questions


Post your Comments and Discuss Palo Alto Networks PSE-Cortex exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!