Palo Alto Networks PSE-Cortex Exam - Topic 2 Question 92 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam

Question #: 92
Topic #: 2

[All PSE-Cortex Questions]

Which Cortex XDR capability extends investigations to an endpoint?

ALog Stitching

BCausality Chain

CSensors

DLive Terminal

Show Suggested Answer

Suggested Answer: A

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-concepts

by Luke at Apr 10, 2026, 04:39 AM

Limited Time Offer

25%

Off

Get Premium PSE-Cortex Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Yuki

14 hours ago

D) Live Terminal is crucial for real-time access.

upvoted 0 times

...

Vanda

6 days ago

C) Sensors seems right. They monitor everything.

upvoted 0 times

...

Willie

11 days ago

I feel like A) Log Stitching is important too. It gathers data.

upvoted 0 times

...

Carlota

16 days ago

I think it's B) Causality Chain. It connects the dots.

upvoted 0 times

...

Jeanice

21 days ago

C) Sensors are crucial, but they don’t extend investigations directly.

upvoted 0 times

...

Joaquin

26 days ago

A) Log Stitching could help too, but it's more about logs.

upvoted 0 times

...

Earlean

1 month ago

True, but Live Terminal is more about control, not investigation.

upvoted 0 times

...

Renea

1 month ago

I'm not so sure. What about D) Live Terminal? It allows real-time access.

upvoted 0 times

...

Junita

1 month ago

I agree! Causality Chain shows the sequence of actions.

upvoted 0 times

...

Tammi

2 months ago

I think it's B) Causality Chain. It connects events.

upvoted 0 times

...

Azalee

2 months ago

I agree with Junita, Live Terminal makes the most sense!

upvoted 0 times

...

Annett

2 months ago

Wait, is it really D? That seems too obvious.

upvoted 0 times

...

Lizette

2 months ago

A) Log Stitching is definitely not the answer.

upvoted 0 times

...

Kanisha

4 months ago

I thought it was C) Sensors, but I could be wrong.

upvoted 0 times

...

Junita

4 months ago

I'm pretty sure it's D) Live Terminal.

upvoted 0 times

...

Merlyn

4 months ago

I practiced a similar question, and I think Sensors could be the right answer, but I need to double-check my notes.

upvoted 0 times

...

Shenika

4 months ago

I feel like Log Stitching is more about data correlation rather than extending investigations.

upvoted 0 times

...

Weldon

5 months ago

I remember studying the Causality Chain, but I can't recall if it directly relates to endpoint investigations.

upvoted 0 times

...

Becky

5 months ago

I think the capability that extends investigations to an endpoint might be Live Terminal, but I'm not entirely sure.

upvoted 0 times

...