NEW QUESTION 54
Which two filter operators are available in Cortex XDR? (Choose two.)

NEW QUESTION 55
Where is the output of the task visible when a playbook task errors out?

NEW QUESTION 56
Which feature of Cortex XSIAM helps analyst reduce the noise and false positives that often plague traditional SIEM systems?

NEW QUESTION 57
A customer has purchased Cortex XSOAR and has a need to rapidly stand up the product in their environment. The customer has stated that their internal staff are currently occupied with other projects.
Which Palo Alto Networks service offering should be recommended to the customer?

NEW QUESTION 58
In addition to migration and go-live, what are two best-practice steps for migrating from SIEM to Cortex XSIAM? (Choose two.)

NEW QUESTION 59
A Cortex Xpanse customer receives an email regarding an upcoming product update and wants to get more information on the new features.
In which resource can the customer access this information?

NEW QUESTION 60
A Cortex XSOAR customer has a phishing use case in which a playbook has been implemented with one of the steps blocking a malicious URL found in an email reported by one of the users.
What would be the appropriate next step in the playbook?

NEW QUESTION 61
What does Cortex Xpanse ingest from XDR endpoints?

NEW QUESTION 62
What is the requirement for enablement of endpoint and network analytics in Cortex XDR?

NEW QUESTION 63
Which technology allows a customer to integrate Cortex Xpanse with third-party applications or services, assets, and IP ranges while leveraging investigation capabilities?

NEW QUESTION 64
Which two types of indicators of compromise (IOCs) are available for creation in Cortex XDR?
(Choose two.)

NEW QUESTION 65
Given the integration configuration and error in the screenshot what is the cause of the problem?

NEW QUESTION 66
What must a customer deploy prior to collecting endpoint data in Cortex XSIAM?

NEW QUESTION 67
Which feature of Cortex XSIAM displays an entire picture of an attack, including the originating process or delivery point?

NEW QUESTION 68
The certificate used for decryption was installed as a trusted toot CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console.What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?

NEW QUESTION 69
A customer has purchased Cortex Data Lake storage with the following configuration, which requires 2 TB of Cortex Data Lake to order:
– support for 300 total Cortex XDR clients all forwarding Cortex XDR
data with 30-day retention
– storage for higher fidelity logs to support Cortex XDR advanced
analytics
The customer now needs 1000 total Cortex XDR clients, but continues with 300 clients forwarding Cortex XDR data with 30-day retention.
What is the new total storage requirement for Cortex Data Lake storage to order?

NEW QUESTION 70
Cortex XSOAR has extracted a malicious Internet Protocol (IP) address involved in command- and-control (C2) traffic.
What is the best method to block this IP from communicating with endpoints without requiring a configuration change on the firewall?