Palo Alto Networks PSE-Cortex Exam - Topic 7 Question 99 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam

Question #: 99
Topic #: 7

[All PSE-Cortex Questions]

Which two types of indicators of compromise (IOCs) are available for creation in Cortex XDR? (Choose two.)

Aregistry

Bfile path

Chash

Dhostname

Show Suggested Answer

Suggested Answer: B, C

by Erasmo at Aug 12, 2026, 01:58 PM

Limited Time Offer

25%

Off

Get Premium PSE-Cortex Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mona

3 days ago

I agree, A and C are the way to go!

upvoted 0 times

...

Eura

8 days ago

Wait, are you sure about those? Seems off.

upvoted 0 times

...

Wilburn

13 days ago

A and C are spot on, no doubt!

upvoted 0 times

...

Clarence

19 days ago

I thought it was B) file path too.

upvoted 0 times

...

Andra

24 days ago

Definitely A) registry and C) hash!

upvoted 0 times

...

Teresita

29 days ago

I recall hash being a common IOC, but I can't remember if registry was also included. It’s a bit fuzzy for me.

upvoted 0 times

...

Shad

1 month ago

I practiced a similar question where file path was definitely one of the answers. I’m leaning towards that one.

upvoted 0 times

...

Teri

1 month ago

I'm not entirely sure, but I feel like hash and hostname could also be options. They seem relevant to IOCs.

upvoted 0 times

...

Deonna

1 month ago

I think I remember that registry and file path were mentioned as IOCs in our study materials.

upvoted 0 times

...