Palo Alto Networks PSE-Cortex Exam - Topic 2 Question 92 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam

Question #: 92
Topic #: 2

[All PSE-Cortex Questions]

Which Cortex XDR capability extends investigations to an endpoint?

ALog Stitching

BCausality Chain

CSensors

DLive Terminal

Show Suggested Answer

Suggested Answer: A

by Luke at Apr 10, 2026, 04:39 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

20 days ago

I thought it was C) Sensors, but I could be wrong.

upvoted 0 times

...

25 days ago

I'm pretty sure it's D) Live Terminal.

upvoted 0 times

...

1 month ago

I practiced a similar question, and I think Sensors could be the right answer, but I need to double-check my notes.

upvoted 0 times

...

1 month ago

I feel like Log Stitching is more about data correlation rather than extending investigations.

upvoted 0 times

...

2 months ago

I remember studying the Causality Chain, but I can't recall if it directly relates to endpoint investigations.

upvoted 0 times

...

2 months ago

I think the capability that extends investigations to an endpoint might be Live Terminal, but I'm not entirely sure.

upvoted 0 times

...