PSE-Cortex

PSE-Cortex practice questions, page 5 of 5, with answer review and explanations.

Question 21

Which statement applies to a Cortex XSOAR engine that is part of a load-balancing group?

  1. It must be in a load-balancing group with at least three additional members.
  2. It must have port 443 open to allow the XSOAR server to establish a connection.
  3. It does not appear in the in the engine drop-down menu when configuring an integration instance.
  4. It can be used separately as an engine only if directly connected to the XSOAR server.

Question 22

What is the result of creating an exception from an exploit security event?

  1. Administrators are exempt from generating alerts for 24 hours.
  2. Process from WildFire analysis is whitelisted.
  3. Triggered exploit protection module (EPM) for the host and process involved is disabled.
  4. User is exempt from generating events for 24 hours.

Question 23

Which two filter operators are available in Cortex XDR? (Choose two.)

  1. Is Contained By
  2. < >
  3. =
  4. Contains

Question 24

Which attack method is a result of techniques designed to gain access through vulnerabilities in the code of an operating system (OS) or application?

  1. exploit
  2. malware
  3. phishing
  4. ransomware