Exam PSE-Cortex Topic 1 Question 53 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam
Question #: 53
Topic #: 1

An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )

A. In the Cortex XDR security event, review the specific parent process, child process, and command line arguments B. Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist C. Contact support and ask for a security exception. D. With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module

Comments

0 Happy Clients

0 Shares

0 Demo Downloads

10 Years in Business