Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks PSE-Cortex Exam - Topic 6 Question 86 Discussion

Cortex XSOAR has extracted a malicious IP address involved in command-and-control traffic.What is the best method to automatically block this IP from communicating with endpoints without requiring a configuration change on the firewall?
C) Add the IP address to a threat intelligence management malicious IP list to elevate priority of future alerts.
A) Create a NetOps ticket requesting a configuration change to the firewall to block the IP.
B) Add the IP address to an external dynamic list used by the firewall.
D) Block the IP address by creating a deny rule in the firewall.

Palo Alto Networks PSE-Cortex Exam - Topic 6 Question 86 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam
Question #: 86
Topic #: 6
[All PSE-Cortex Questions]

Cortex XSOAR has extracted a malicious IP address involved in command-and-control traffic.

What is the best method to automatically block this IP from communicating with endpoints without requiring a configuration change on the firewall?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Carin at Nov 21, 2025, 09:02 AM

Limited Time Offer

25%

Off

Get Premium PSE-Cortex Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Micaela
6 months ago
Exactly! B is proactive. Let’s block that IP now!
upvoted 0 times
...
Helene
6 months ago
Option A just delays the process. We need to act fast!
upvoted 0 times
...
Rolande
6 months ago
True, but we need immediate action. B is more direct.
upvoted 0 times
...
Lorenza
6 months ago
D seems like a solid option too, but it requires more effort.
upvoted 0 times
...
Vincenza
6 months ago
Totally agree with B! Quick and efficient solution.
upvoted 0 times
...
Leonardo
7 months ago
Wait, can we really block it without a firewall change? Sounds risky.
upvoted 0 times
...
Buck
7 months ago
I disagree, A just delays the process.
upvoted 0 times
...
Laurene
7 months ago
A) Raising a NetOps ticket is the most bureaucratic approach.
upvoted 0 times
...
Krystina
7 months ago
C) Putting the IP in a threat intel list is a good way to track it.
upvoted 0 times
...
Veronika
8 months ago
Haha, who needs a firewall when you can just unplug the internet?
upvoted 0 times
...
Ligia
8 months ago
D) Blocking the IP with a deny rule in the firewall is the way to go.
upvoted 0 times
...
Werner
8 months ago
B) Adding the IP to an external dynamic list used by the firewall is the best method.
upvoted 0 times
...
Kerry
8 months ago
I keep second-guessing myself, but I feel like A is definitely not the right choice since it involves a ticket. We need something more immediate.
upvoted 0 times
...
Keena
8 months ago
I practiced a similar question, and I feel like D is too manual. We want something that doesn't require a firewall change, so I think B is the way to go.
upvoted 0 times
...
Merri
9 months ago
I think the best option might be B, adding the IP to an external dynamic list. It seems like a way to automate the blocking without needing a manual change.
upvoted 0 times
...
Albina
9 months ago
Hmm, I'm not sure if I fully understand the differences between the options. Can someone clarify whether creating a dynamic list (option B) is more effective than just adding the IP to a threat intelligence list (option C)? I want to make sure I pick the best approach.
upvoted 0 times
...
Devora
9 months ago
Option D seems like the most direct way to block the IP, but I'm worried that creating a custom firewall rule might require more manual intervention down the line. I'm leaning towards B to keep things automated and low-maintenance.
upvoted 0 times
...
Teri
9 months ago
I agree, B makes sense. Dynamic lists are efficient for this.
upvoted 0 times
...
Alesia
9 months ago
B is the way to go! External dynamic lists are super effective.
upvoted 0 times
...
Rosio
9 months ago
I think option B is the best choice. It’s quick and doesn’t need a firewall change.
upvoted 0 times
...
Una
10 months ago
I'm not entirely sure, but I remember something about using threat intelligence lists. Maybe C could be useful for future alerts, but it doesn't block the IP immediately.
upvoted 0 times
...
Emilio
10 months ago
But what about option C? Elevating alerts could help in the long run.
upvoted 0 times
...
Ronnie
10 months ago
I'm a bit confused on the differences between the options. Is option C just for prioritizing alerts, or does it actually block the IP as well? I want to make sure I fully understand the implications of each choice.
upvoted 0 times
...
Dino
10 months ago
I think option B is the best approach here. Creating a dynamic list that the firewall can reference seems like the most automated and efficient way to block this IP without having to manually configure the firewall.
upvoted 0 times
Derrick
5 months ago
External dynamic lists are the future of threat management!
upvoted 0 times
...
Galen
5 months ago
True, and option D requires manual changes which we want to avoid.
upvoted 0 times
...
Leontine
5 months ago
Option A just delays the process. We need immediate action.
upvoted 0 times
...
Britt
5 months ago
Yeah, dynamic lists make it so much easier to manage threats.
upvoted 0 times
...
Brynn
5 months ago
I agree, option B is definitely the way to go.
upvoted 0 times
...
...

Save Cancel