Palo Alto Networks System Engineer Professional - Cortex

Here you have the best Palo Alto Networks PSE-Cortex practice exam questions

You have 122 total questions to study from
Each page has 5 questions, making a total of 25 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on January 25, 2026
This site is not affiliated with or endorsed by Palo Alto Networks.

Question 1 of 122

What does the Cortex XSOAR "Saved by Dbot" widget calculate?

amount saved in Dollars according to actions carried out by all users in Cortex XSOAR across all incidents

amount saved in Dollars by using Cortex XSOAR instead of other products

amount of time saved by each playbook task within an incident

amount of time saved by Dbot's machine learning (ML) capabilities

Correct Answer: D

The Cortex XSOAR 'Saved by Dbot' widget calculates the amount of time saved by Dbot's machine learning (ML) capabilities. This widget helps to understand the efficiency and time-optimization benefits gained from the automation and intelligence provided by Dbot within the Cortex XSOAR platform.

Question 2 of 122

Which Cortex XDR agent capability prevents loading malicious files from USB-connected removable equipment?

agent management

device control

agent configuration

device customization

Correct Answer: B

Question 3 of 122

Which type of log is ingested natively in Cortex XDR Pro per TB?

Google Kubernetes Engine

Demisto

Docker

Microsoft Office 365

Correct Answer: D

Question 4 of 122

An adversary attempts to communicate with malware running on a network in order to control malware activities or to exfiltrate data from the network.
Which Cortex XDR Analytics alert will this activity most likely trigger?

uncommon local scheduled task creation

malware

new administrative behavior

DNS Tunneling

Correct Answer: D

Question 5 of 122

How do sub-playbooks affect the Incident Context Data?

When set to private, task outputs do not automatically get written to the root context.

When set to global, sub-playbook tasks do not have access to the root context.

When set to global, parallel task execution is allowed.

When set to private, task outputs are automatically written to the root context.

Correct Answer: A

When a sub-playbook is set to private, task outputs do not automatically get written to the root context. This means that the outputs from the tasks within the sub-playbook are isolated and will not interfere with or modify the main incident context data directly. This mechanism helps to control the scope and impact of the playbook’s execution, ensuring that only relevant data is shared with the root context as needed.