Palo Alto Networks Exam PSE-Cortex Topic 1 Question 68 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam

Question #: 68
Topic #: 1

[All PSE-Cortex Questions]

Which two items are stitched to the Cortex XDR causality chain'' (Choose two)

Afirewall alert

BSIEM alert

Cfull URL

Dregistry set value

Show Suggested Answer

Suggested Answer: A, B

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/cortex-xdr-indicators/working-with-biocs/create-a-bioc-rule.html

by Jesusita at Sep 13, 2024, 05:46 PM

Limited Time Offer

25%

Off

Get Premium PSE-Cortex Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lanie

4 days ago

I'm not sure about C) full URL and D) registry set value, they seem less relevant.

upvoted 0 times

...

Minna

5 days ago

A SIEM alert could definitely be part of the Cortex XDR causality chain, but I'm not sure about a firewall alert. I'll play it safe and choose B and C.

upvoted 0 times

...

Adaline

6 days ago

I agree with Joaquin, those alerts are crucial for the causality chain.

upvoted 0 times

...

Gracia

10 days ago

The full URL and registry set value seem like the most relevant items to the Cortex XDR causality chain. I'm going to go with C and D.

upvoted 0 times

...

Joaquin

12 days ago

I think it's A) firewall alert and B) SIEM alert.

upvoted 0 times

...