Palo Alto Networks PSE-Cortex Exam - Topic 2 Question 92 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam

Question #: 92
Topic #: 2

[All PSE-Cortex Questions]

Which Cortex XDR capability extends investigations to an endpoint?

ALog Stitching

BCausality Chain

CSensors

DLive Terminal

Show Suggested Answer

Suggested Answer: A

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-concepts

by Luke at Apr 10, 2026, 04:39 AM

Limited Time Offer

25%

Off

Get Premium PSE-Cortex Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tammi

2 days ago

I think it's B) Causality Chain. It connects events.

upvoted 0 times

...

Azalee

7 days ago

I agree with Junita, Live Terminal makes the most sense!

upvoted 0 times

...

Annett

12 days ago

Wait, is it really D? That seems too obvious.

upvoted 0 times

...

Lizette

17 days ago

A) Log Stitching is definitely not the answer.

upvoted 0 times

...

Kanisha

2 months ago

I thought it was C) Sensors, but I could be wrong.

upvoted 0 times

...

Junita

2 months ago

I'm pretty sure it's D) Live Terminal.

upvoted 0 times

...

Merlyn

3 months ago

I practiced a similar question, and I think Sensors could be the right answer, but I need to double-check my notes.

upvoted 0 times

...

Shenika

3 months ago

I feel like Log Stitching is more about data correlation rather than extending investigations.

upvoted 0 times

...

Weldon

3 months ago

I remember studying the Causality Chain, but I can't recall if it directly relates to endpoint investigations.

upvoted 0 times

...

Becky

3 months ago

I think the capability that extends investigations to an endpoint might be Live Terminal, but I'm not entirely sure.

upvoted 0 times

...