A customer requires an analytics tool with the following attributes:
- Uses the logs on the firewall to detect actionable events on the network
- Automatically processes a series of related threat events that, when combines, indicate a likely comprised host on the network
- Pinpoints the area of risk and allows for assessment of the risk to action can be taken to prevent exploitation of network resources
Which feature of PAN-OS will address these requirements?
Suggested Answer: C
Get Premium PSE-Strata Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
WI
Willard
1 month ago
A is interesting too, but I feel like it lacks the automation aspect needed here.
TA
Taryn
1 month ago
I agree, but D could also work. Cortex XDR provides deep insights.
MO
Mozelle
1 month ago
I think C is the best choice. The automated correlation engine is key for detecting threats.
AR
Arlean
2 months ago
Wait, does ACE really do all that? Sounds too good to be true!
NO
Noble
2 months ago
Cortex XDR could also fit the bill, but ACE is more focused.
ST
Starr
2 months ago
Not so sure about that, WildFire seems like a solid option too.
SI
Sina
2 months ago
Totally agree, ACE handles those threat events well!
AD
Adelle
2 months ago
I think the Automated correlation engine (ACE) is the right choice.
DE
Denise
2 months ago
I’m leaning towards option B, the third-party SIEM, but I recall that it might not fully automate the process like the ACE does.
RE
Reiko
3 months ago
I practiced a similar question about threat detection tools, and I feel like Cortex XDR could also be relevant here, especially with its focus on risk assessment.
TH
Thurman
3 months ago
I think the Automated Correlation Engine (ACE) might be the right choice since it sounds like it processes related threat events, but I could be mixing it up with something else.
MA
Malcom
3 months ago
I remember studying the features of PAN-OS, but I'm not entirely sure which one specifically automates the correlation of threat events.