Palo Alto Networks Exam PSE-Cortex Topic 1 Question 47 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam

Question #: 47
Topic #: 1

If an anomalous process is discovered while investigating the cause of a security event, you can take immediate action to terminate the process or the whole process tree, and block processes from running by initiating which Cortex XDR capability?

ALive Sensors

BFile Explorer

CLog Stitching

DLive Terminal

Show Suggested Answer

Suggested Answer: A, C

by Derick at Dec 24, 2023, 03:46 PM

Limited Time Offer

25%

Off

Get Premium PSE-Cortex Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Blythe

2 days ago

I agree with Della, Live Sensors can help terminate the anomalous process.

upvoted 0 times

...

Dottie

4 days ago

Live Sensors? Really? That's like trying to catch a fly with a baseball bat. I'm going with Live Terminal, the obvious choice here.

upvoted 0 times

...

Della

5 days ago

I think the answer is A) Live Sensors.

upvoted 0 times

...

Stefany

8 days ago

I'm not sure, but I think C) Log Stitching could also be used to block processes from running.

upvoted 0 times

...

Ettie

9 days ago

Ah, the age-old question of terminating anomalous processes. I'm going with Live Terminal on this one - it's the only option that sounds like it would actually let me interact with the process in real-time.

upvoted 0 times

...

Graciela

14 days ago

I agree with Tonja, Live Sensors can help terminate the anomalous process.

upvoted 0 times

...

Tonja

17 days ago

I think the answer is A) Live Sensors.

upvoted 0 times

...