最新のSecOps-Pro問題集で試験を準備する

Palo Alto Networks SecOps-Pro 試験概要:

Palo Alto Networks SecOps-Pro 試験シラバストピック:

Palo Alto Networks Security Operations Professional 認定 SecOps-Pro 試験問題：

1. Where can an administrator begin to grant a new non-SSO user access to a Cortex XDR tenant?

A) Cortex Gateway
B) Cortex XDR tenant settings under Access Management
C) IT Service Portal
D) Customer Support Portal

2. Which Cortex XSOAR feature will execute a specific integration command to enrich an IP address without leaving the incident view, while also ensuring this action is recorded in the incident's history?

A) Playground
B) Evidence board
C) War Room
D) Work plan

3. A security operations center (SOC) analyst is reviewing the current queue of incidents in the Cortex XDR console. The goal is to prioritize a new threat that signifies a confirmed, deep-seated persistent compromise and represents the greatest risk of immediate, irreparable damage to core network assets. Which incident should the analyst prioritize for immediate containment and remediation?

A) A third-party security scanner reports an unpatched critical vulnerability with a Common Vulnerability Scoring System (CVSS) score of 9.8 on a secondary internal application server.
B) An unknown internal host is communicating with a known command-and-control (C2) server over a non-standard port after a successful lateral movement activity was found on a domain controller.
C) The nightly data integrity check failed for the main customer billing database, reporting corrupt indices due to an unknown database process.
D) A spike of 1500 blocked email messages containing common phishing URLs was recorded in the last hour, and no users can be detected as having clicked on the links.

4. Which artifacts should be collected and analyzed during a forensic investigation following a security operations center (SOC) breach due to a phishing attack?

A) Network traffic logs, event logs, email artifacts
B) IOC logs, BIOC logs, behavior analytics
C) SQL injection logs, brute force attack logs, Mimikatz artifacts
D) Proxy logs, URL logs, cloud audit logs

5. What is the main difference between artificial intelligence (AI) and machine learning (ML) in cybersecurity?

A) AI and ML are interchangeable terms that refer to preprogrammed rules which can detect threats.
B) ML enables machines to learn from data, while AI enables machines to mimic human cognitive functions.
C) AI is used for automating responses, while ML manages hardware and network infrastructure.
D) ML is a broader discipline that includes AI, which focuses solely on natural language processing.

質問と回答：