What is the primary use of the URL indicator type in Cortex Cloud?

To identify and track malicious web resources

To perform web content filtering for users

To manage SSL certificates for websites

To store the content of web pages for forensic analysis

A security analyst is reviewing a network alert that shows a workstation communicating with an external IP address that is known to be part of a botnet. The analyst wants to determine if any other assets in the environment have communicated with this IP. What should the analyst do in Cortex Cloud?

Review the compliance reports to see if the IP is listed in any framework

Add the IP to the asset inventory as a managed external asset

Create an IP address indicator for the botnet IP and correlate it with network traffic logs

Create a domain indicator for the botnet's command-and-control domain

A cloud security team notices that a newly provisioned Linux server in a development VPC is not appearing in the Cortex Cloud asset inventory. The server has been running for two days and is actively communicating with other assets. What is the most likely reason the asset is missing?

The cloud account or resource group containing the server has not been onboarded as a data source

The server has not generated any security alerts, so it is excluded from inventory

The rules and policies engine requires a specific tag before an asset is inventoried

The server's IP address indicator type has not been configured in the threat intelligence feed

How does Cortex Cloud support incident response?

By automatically patching all vulnerabilities

By providing centralized visibility into security events

By managing cloud resource provisioning

By providing a platform for employee training

What is a key capability of log management in Cortex Cloud?

Ingesting logs from various sources for centralized analysis

Providing real-time threat intelligence feeds

Automatically patching vulnerabilities in cloud resources

Encrypting all data at rest in the cloud environment

Palo Alto NetworksCertified Cloud Security Professional

Domain 2Objective 1

2.1 Explain the Function of Key Components of Cortex Cloud CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 7)

Part of the Cortex Fundamentals domain, which accounts for 15% of the CLOUD-SECURITY-PROFESSIONAL exam.

39questions here

8free pages

11concepts

15%of the exam

Questions 31–35

31foundation · easy
What is the primary use of the URL indicator type in Cortex Cloud?
Select an answer first
32application · medium
A security analyst is reviewing a network alert that shows a workstation communicating with an external IP address that is known to be part of a botnet. The analyst wants to determine if any other assets in the environment have communicated with this IP. What should the analyst do in Cortex Cloud?
Select an answer first
33application · medium
A cloud security team notices that a newly provisioned Linux server in a development VPC is not appearing in the Cortex Cloud asset inventory. The server has been running for two days and is actively communicating with other assets. What is the most likely reason the asset is missing?
Select an answer first
34foundation · easy
How does Cortex Cloud support incident response?
Select an answer first
35foundation · easy
What is a key capability of log management in Cortex Cloud?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-SECURITY-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-PROFESSIONAL” is a trademark of its owner, used for identification only.