NEW QUESTION 14
Phishing belongs which of the following MITRE ATT&CK tactics?

NEW QUESTION 15
What is by far the most common tactic used by ransomware to shut down a victim’s operation?

NEW QUESTION 16
Where would you go to add an exception to exclude a specific file hash from examination by the Malware profile for a Windows endpoint?

NEW QUESTION 17
Which of the following best defines the Windows Registry as used by the Cortex XDR agent?

NEW QUESTION 18
Which two types of exception profiles you can create in Cortex XDR? (Choose two.)

NEW QUESTION 19
Which statement is true for Application Exploits and Kernel Exploits?

NEW QUESTION 20
Which module provides the best visibility to view vulnerabilities?

NEW QUESTION 21
When selecting multiple Incidents at a time, what options are available from the menu when a user right-clicks the incidents? (Choose two.)

NEW QUESTION 22
Which statement best describes how Behavioral Threat Protection (BTP) works?

NEW QUESTION 23
When creating a scheduled report which is not an option?

NEW QUESTION 24
With a Cortex XDR Prevent license, which objects are considered to be sensors?

NEW QUESTION 25
Which of the following protection modules is checked first in the Cortex XDR Windows agent malware protection flow?

NEW QUESTION 26
As a Malware Analyst working with Cortex XDR you notice an alert suggesting that there was a prevented attempt to open a malicious Word document. You learn from the WildFire report and AutoFocus that this document is known to have been used in Phishing campaigns since 2018. What steps can you take to ensure that the same document is not opened by other users in your organization protected by the Cortex XDR agent?

NEW QUESTION 27
In Windows and macOS you need to prevent the Cortex XDR Agent from blocking execution of a file based on the digital signer. What is one way to add an exception for the singer?

NEW QUESTION 28
What are two purposes of “Respond to Malicious Causality Chains” in a Cortex XDR Windows Malware profile? (Choose two.)

NEW QUESTION 29
When viewing the incident directly, what is the “assigned to” field value of a new Incident that was just reported to Cortex?