Which Cortex XDR license is required for a customer that requests endpoint detection and response (EDR) data collection capabilities?
Which two entities can be created as a behavioral indicator of compromise (BIOC)? (Choose two.)
A test for a Microsoft exploit has been planned. After some research Internet Explorer 11 CVE-2016-0189 has been selected and a module in Metasploit has been identified
(exploit/windows/browser/ms16_051_vbscript)
The description and current configuration of the exploit are as follows;
What is the remaining configuration?
A)
B)
C)
D)
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation - Step 2 of 2 window.
During the service instance provisioning which three DNS host names are created? (Choose three.)
On a multi-tenanted v6.2 Cortex XSOAR server, which path leads to the server.log for "Tenant1"?
Which solution profiles network behavior metadata, not payloads and files, allowing effective operation regardless of encrypted or unencrypted communication protocols, like HTTPS?
What are two ways Cortex XSIAM monitors for issues with data ingestion? (Choose two.)
Which feature of Cortex XSIAM helps analyst reduce the noise and false positives that often plague traditional SIEM systems?
Which playbook functionality allows grouping of tasks to create functional building blocks?
Which two log types should be configured for firewall forwarding to the Cortex Data Lake for use by Cortex XDR? (Choose two)
When preparing the golden image in a Cortex XDR Virtual Desktop Infrastructure (VDI) deployment, which step is required?
Which two troubleshooting steps should be taken when an integration is failing to connect? (Choose two.)
Which technology allows a customer to integrate Cortex Xpanse with third-party applications or services, assets, and IP ranges while leveraging investigation capabilities?
An administrator of a Cortex XDR protected production environment would like to test its ability to protect users from a known flash player exploit.
What is the safest way to do it?
Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?
Which integration allows searching and displaying Splunk results within Cortex XSOAR?
An administrator has a critical group of systems running Windows XP SP3 that cannot be upgraded The administrator wants to evaluate the ability of Traps to protect these systems and the word processing applications running on them
How should an administrator perform this evaluation?
A Cortex XSIAM customer is unable to access their Cortex XSIAM tenant.
Which resource can the customer use to validate the uptime of Cortex XSIAM?
Which statement applies to the malware protection flow of the endpoint agent in Cortex XSIAM?
An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project's operational considerations'?
Which task allows the playbook to follow different paths based on specific conditions?
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)
Which element displays an entire picture of an attack, including the root cause or delivery point?
Cortex XSOAR has extracted a malicious Internet Protocol (IP) address involved in command-and-control (C2) traffic.
What is the best method to block this IP from communicating with endpoints without requiring a configuration change on the firewall?
Which two types of indicators of compromise (IOCs) are available for creation in Cortex XDR? (Choose two.)
What are two reasons incident investigation is needed in Cortex XDR? (Choose two.)
A customer is hesitant to directly connect their network to the Cortex platform due to compliance restrictions.
Which deployment method should the customer use to ensure secure connectivity between their network and the Cortex platform?
In the DBotScore context field, which context key would differentiate between multiple entries for the same indicator in a multi-TIP environment?
What is a benefit of user entity behavior analytics (UEBA) over security information and event management (SIEM)?
Given the integration configuration and error in the screenshot what is the cause of the problem?
What are two ways a customer can configure user authentication access Cortex Xpanse? (Choose two.)
What allows the use of predetermined Palo Alto Networks roles to assign access rights to Cortex XDR users?
DumpsMate's team of experts is always available to respond your queries on exam preparation. Get professional answers on any topic of the certification syllabus. Our experts will thoroughly satisfy you.
TESTED 09 May 2025
Correct