Palo Alto Networks PSE-Cortex Quiz 1 Topic 1 Questions 1-5

Question: 1

A customer wants to modify the retention periods of their Threat logs in Cortex Data Lake.

Where would the user configure the ratio of storage for each log type?

AWithin the TMS, create an agent settings profile and modify the Disk Quota value

BIt is not possible to configure Cortex Data Lake quota for specific log types.

CGo to the Cortex Data Lake App in Cloud Services, then choose Configuration and modify the Threat Quota

DWrite a GPO for each endpoint agent to check in less often

Show Answer

Question: 2

Which two log types should be configured for firewall forwarding to the Cortex Data Lake for use by Cortex XDR? (Choose two)

ASecurity Event

BHIP

CCorrelation

DAnalytics

Show Answer

Question: 3

What is the retention requirement for Cortex Data Lake sizing?

Anumber of endpoints

Bnumber of VM-Series NGFW

Cnumber of days

Dlogs per second

Show Answer

Question: 4

Which two items are stitched to the Cortex XDR causality chain'' (Choose two)

Afirewall alert

BSIEM alert

Cfull URL

Dregistry set value

Show Answer

Question: 5

"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?

A#Bob

B/invite Bob

C@Bob

D!invite Bob

Show Answer

Palo Alto Networks PSE-Cortex Quiz:1 Topic:1 Questions:1-5