U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks PSE-Cortex Exam - Topic 1 Question 29 Discussion

An Administrator is alerted to a Suspicious Process Creation security event from multiple users.The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
B) Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist and C) In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
A) With the Malware Security profile, disable the 'Prevent Malicious Child Process Execution' module
D) Contact support and ask for a security exception.

Palo Alto Networks PSE-Cortex Exam - Topic 1 Question 29 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam
Question #: 29
Topic #: 1
[All PSE-Cortex Questions]

An Administrator is alerted to a Suspicious Process Creation security event from multiple users.

The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )

Show Suggested Answer Hide Answer
Suggested Answer: B, C

by Terrilyn at Nov 19, 2022, 03:36 PM

Limited Time Offer

25%

Off

Get Premium PSE-Cortex Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Hyman
8 months ago
B and C are solid steps. Let's not jump to conclusions too fast!
upvoted 0 times
...
Milly
8 months ago
Wait, can we really just contact support for an exception? Sounds too easy!
upvoted 0 times
...
Jin
8 months ago
Not so sure about A. Disabling security features seems risky.
upvoted 0 times
...
Bronwyn
8 months ago
Definitely agree with C. You gotta check the details first!
upvoted 0 times
...
Katy
8 months ago
I think option B is the way to go. Whitelisting makes sense.
upvoted 0 times
...
Temeka
8 months ago
I recall a practice question where we had to analyze security events. Reviewing the details in the Cortex XDR sounds like a solid approach to confirm if these are indeed false positives.
upvoted 0 times
...
Van
8 months ago
I feel like disabling the 'Prevent Malicious Child Process Execution' module might not be the best move. It could expose us to real threats, right?
upvoted 0 times
...
Nada
9 months ago
I'm not entirely sure, but I remember something about whitelisting processes. Maybe adding them to the whitelist could help confirm if they are false positives?
upvoted 0 times
...
Denny
9 months ago
I think we should definitely review the specific parent and child processes first to understand what's triggering the alerts. That seems like a logical step.
upvoted 0 times
...
Kanisha
9 months ago
This seems like a straightforward question about the dimensions of service management. I'll need to recall the key dimensions and think about which one relates to the relationships with other organizations.
upvoted 0 times
...
Tarra
9 months ago
Ah, I see what they're getting at here. Options A and D seem to be the correct answers, as they demonstrate the proper use of REST and SOAP-based Web service designs that align with service-orientation principles.
upvoted 0 times
...
Yolande
9 months ago
This looks like a straightforward question about scheduling and geocoding in Dynamics 365 for Field Service. I'm pretty confident I can tackle this one.
upvoted 0 times
...

Save Cancel