Palo Alto Networks System Engineer – Cortex Free Practice Exam Questions

71 real Palo Alto Networks System Engineer – Cortex exam questions with answers and AI explanations. Palo Alto Networks certification prep — page 3 of 8.

1. Question 21: Which two playbook functionalities allow looping through a group of tasks during playbook execution? (Choose two.)
2. Question 22: Which process in the causality chain does the Cortex XDR agent identify as triggering an event sequence?
3. Question 23: Which source provides data for Cortex XDR?
4. Question 24: Which two manual actions are allowed on War Room entries? (Choose two.)
5. Question 25: How do sub-playbooks affect the Incident Context Data?
6. Question 26: Cortex XSOAR has extracted a malicious Internet Protocol (IP) address involved in command-and-control (C2) traffic. What is the best method to block this IP fr…
7. Question 27: What allows the use of predetermined Palo Alto Networks roles to assign access rights to Cortex XDR users?
8. Question 28: Which two actions are required to add indicators to the whitelist? (Choose two.)
9. Question 29: Which playbook feature allows concurrent execution of tasks?
10. Question 30: What are two reasons incident investigation is needed in Cortex XDR? (Choose two.)