NEW QUESTION 14
Which option is required to prepare the VDI Golden Image?

NEW QUESTION 15
Which step is required to prepare the VDI Golden Image?

NEW QUESTION 16
When analyzing logs for indicators, which are used for only BIOC identification’?

NEW QUESTION 17
How can you view all the relevant incidents for an indicator?

NEW QUESTION 18
An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )

NEW QUESTION 19
The certificate used for decryption was installed as a trusted root CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?

NEW QUESTION 20
Which task allows the playbook to follow different paths based on specific conditions?

NEW QUESTION 21
Which process in the causality chain does the Cortex XDR agent identify as triggering an event sequence?

NEW QUESTION 22
Which option is required to prepare the VDI Golden Image?

NEW QUESTION 23
Which CLI query would bring back Notable Events from Splunk?
A)

B)

C)

D)

NEW QUESTION 24
What are process exceptions used for?

NEW QUESTION 25
How many use cases should a POC success criteria document include?

NEW QUESTION 26
The certificate used for decryption was installed as a trusted toot CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console. What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?

NEW QUESTION 27
If an anomalous process is discovered while investigating the cause of a security event, you can take immediate action to terminate the process or the whole process tree, and block processes from running by initiating which Cortex XDR capability?

NEW QUESTION 28
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?

NEW QUESTION 29
In an Air-Gapped environment where the Docker package was manually installed after the Cortex XSOAR installation which action allows Cortex XSOAR to access Docker?

NEW QUESTION 30
Which two filter operators are available in Cortex XDR? (Choose two.)

NEW QUESTION 31
When analyzing logs for indicators, which are used for only BIOC identification’?

NEW QUESTION 32
If you have a playbook task that errors out. where could you see the output of the task?

NEW QUESTION 33
What is the difference between an exception and an exclusion?

NEW QUESTION 34
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)