The prospect is deciding whether to go with a phishing or a ServiceNow use case as part of their POC We have integrations for both but a playbook for phishing only.
Which use case should be used for the POC?
정답:
Question No : 4
In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?
정답:
Question No : 5
Which Cortex XDR capability extends investigations to an endpoint?
Which step is required to prepare the VDI Golden Image?
정답:
Question No : 7
An adversary is attempting to communicate with malware running on your network for the purpose of controlling malware activities or for ex filtrating data from your network.
Which Cortex XDR Analytics alert is this activity most likely to trigger'?
정답:
Question No : 8
What is the retention requirement for Cortex Data Lake sizing?
Which task allows the playbook to follow different paths based on specific conditions?
정답:
Question No : 11
A test for a Microsoft exploit has been planned. After some research Internet Explorer 11 CVE-2016-0189 has been selected and a module in Metasploit has been identified
(exploit/windows/browser/ms16_051_vbscript)
The description and current configuration of the exploit are as follows;
What is the remaining configuration?
A)
B)
C)
D)
정답:
Question No : 12
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)
정답:
Question No : 13
The certificate used for decryption was installed as a trusted toot CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console.
What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?
정답:
Question No : 14
A customer wants to modify the retention periods of their Threat logs in Cortex Data Lake.
Where would the user configure the ratio of storage for each log type?
정답:
Question No : 15
An EDR project was initiated by a CISO.
Which resource will likely have the most heavy influence on the project?