Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks PSE-Cortex Exam - Topic 4 Question 90 Discussion

A Cortex XSOAR customer wants to ingest emails from a single mailbox. The mailbox brings in reported phishing emails and email requests from human resources (HR) to onboard new users. The customer wants to run two separate workflows from this mailbox, one for phishing and one for onboarding.What will allow Cortex XSOAR to accomplish this in the most efficient way?
B) Use an incident classifier based on a field in each type of email to classify those containing 'Phish Alert' in the subject as phishing and those containing 'Onboard Request' as onboarding.
A) Create two instances of the email integration and classify one instance as ingesting incidents of type phishing and the other as ingesting incidents of type onboarding.
C) Create a playbook to process and determine incident type based on content of the email.
D) Use machine learning (ML) to determine incident type.

Palo Alto Networks PSE-Cortex Exam - Topic 4 Question 90 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam
Question #: 90
Topic #: 4
[All PSE-Cortex Questions]

A Cortex XSOAR customer wants to ingest emails from a single mailbox. The mailbox brings in reported phishing emails and email requests from human resources (HR) to onboard new users. The customer wants to run two separate workflows from this mailbox, one for phishing and one for onboarding.

What will allow Cortex XSOAR to accomplish this in the most efficient way?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Trevor at Mar 09, 2026, 02:31 AM

Limited Time Offer

25%

Off

Get Premium PSE-Cortex Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Cordell
2 days ago
I agree, using subject lines makes it clear.
upvoted 0 times
...
Elsa
7 days ago
I think option B is the best. Simple and effective.
upvoted 0 times
...
Nilsa
12 days ago
C could work, but it might be overkill for this situation.
upvoted 0 times
...
Kate
17 days ago
Definitely A, clear separation is key for these workflows.
upvoted 0 times
...
Jonelle
2 months ago
Surprised that ML isn't the best choice here!
upvoted 0 times
...
Markus
2 months ago
I disagree, I think A is more efficient with separate instances.
upvoted 0 times
...
Almeta
2 months ago
Option B sounds like the simplest solution!
upvoted 0 times
...
Giuseppe
3 months ago
Not sure if classifiers will catch everything, though.
upvoted 0 times
...
Dahlia
3 months ago
Definitely need separate workflows, so A makes sense.
upvoted 0 times
...
Christene
3 months ago
Surprised that ML isn't the top option here!
upvoted 0 times
...
Melita
3 months ago
I disagree, I think A is more straightforward.
upvoted 0 times
...
Vilma
3 months ago
Option B sounds like the best choice for quick classification.
upvoted 0 times
...
Lamonica
3 months ago
Machine learning sounds advanced, but I wonder if option D is overkill for this scenario. It might not be necessary for just two types of emails.
upvoted 0 times
...
Roselle
4 months ago
I practiced a similar question where we had to decide between using classifiers and playbooks. I feel like option C could work, but it might be less efficient than just classifying them right away.
upvoted 0 times
...
Shakira
4 months ago
I'm not entirely sure, but I think creating two instances as in option A might complicate things. It could lead to more maintenance down the line.
upvoted 0 times
...
Avery
4 months ago
I remember we discussed using incident classifiers in class. Option B seems like a solid choice since it directly categorizes emails based on their subject lines.
upvoted 0 times
...

Save Cancel