Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks PSE-Cortex Exam - Topic 1 Question 29 Discussion

An Administrator is alerted to a Suspicious Process Creation security event from multiple users.The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
B) Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist and C) In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
A) With the Malware Security profile, disable the 'Prevent Malicious Child Process Execution' module
D) Contact support and ask for a security exception.

Palo Alto Networks PSE-Cortex Exam - Topic 1 Question 29 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam
Question #: 29
Topic #: 1
[All PSE-Cortex Questions]

An Administrator is alerted to a Suspicious Process Creation security event from multiple users.

The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )

Show Suggested Answer Hide Answer
Suggested Answer: B, C

by Terrilyn at Nov 19, 2022, 03:36 PM

Limited Time Offer

25%

Off

Get Premium PSE-Cortex Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Hyman
11 months ago
B and C are solid steps. Let's not jump to conclusions too fast!
upvoted 0 times
...
Milly
11 months ago
Wait, can we really just contact support for an exception? Sounds too easy!
upvoted 0 times
...
Jin
11 months ago
Not so sure about A. Disabling security features seems risky.
upvoted 0 times
...
Bronwyn
11 months ago
Definitely agree with C. You gotta check the details first!
upvoted 0 times
...
Katy
11 months ago
I think option B is the way to go. Whitelisting makes sense.
upvoted 0 times
...
Temeka
11 months ago
I recall a practice question where we had to analyze security events. Reviewing the details in the Cortex XDR sounds like a solid approach to confirm if these are indeed false positives.
upvoted 0 times
...
Van
11 months ago
I feel like disabling the 'Prevent Malicious Child Process Execution' module might not be the best move. It could expose us to real threats, right?
upvoted 0 times
...
Nada
12 months ago
I'm not entirely sure, but I remember something about whitelisting processes. Maybe adding them to the whitelist could help confirm if they are false positives?
upvoted 0 times
...
Denny
12 months ago
I think we should definitely review the specific parent and child processes first to understand what's triggering the alerts. That seems like a logical step.
upvoted 0 times
...
Kanisha
12 months ago
This seems like a straightforward question about the dimensions of service management. I'll need to recall the key dimensions and think about which one relates to the relationships with other organizations.
upvoted 0 times
...
Tarra
12 months ago
Ah, I see what they're getting at here. Options A and D seem to be the correct answers, as they demonstrate the proper use of REST and SOAP-based Web service designs that align with service-orientation principles.
upvoted 0 times
...
Yolande
12 months ago
This looks like a straightforward question about scheduling and geocoding in Dynamics 365 for Field Service. I'm pretty confident I can tackle this one.
upvoted 0 times
...

Save Cancel