Palo Alto Networks Exam PSE-Cortex Topic 1 Question 29 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam

Question #: 29
Topic #: 1

An Administrator is alerted to a Suspicious Process Creation security event from multiple users.

The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )

AWith the Malware Security profile, disable the 'Prevent Malicious Child Process Execution' module

BWithin the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist

CIn the Cortex XDR security event, review the specific parent process, child process, and command line arguments

DContact support and ask for a security exception.

Show Suggested Answer

Suggested Answer: B, C

by Terrilyn at Nov 19, 2022, 03:36 PM

Limited Time Offer

25%

Off

Get Premium PSE-Cortex Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!