최신Palo Alto Networks XDR Analyst - XDR-Analyst무료샘플문제

A. SQL injection attacks

B. ransomware

C. Zero-day exploits

D. supply-chain attacks

A. Using the Open Card Only

B. Using Open Timeline Actions Only

C. Using the Open Card and Open Timeline actions respectively

D. You can't pivot within a row to Causality view and Timeline views

A. Cortex XDR Cloud per Host

B. Cortex XDR Pro per TB

C. Host Insights

D. Cortex XDR Pro per Endpoint

A. This isn't supported, you have to exit the dashboard and go into the Widget Library first to create it.

B. Click on "Save to Widget Library" in the dashboard and you will be prompted to give the query a name and description.

C. Click on "Save to Action Center" in the dashboard and you will be prompted to give the query a name and description.

D. Click the three dots on the widget and then choose "Save" and this will link the query to the Widget Library.

A. Bin

B. Array expand

C. Dataset

D. Field

A. Every alert creates a new Incident.

B. Alerts that occur within a three-hour time frame are grouped together into one Incident.

C. Only alerts with the same host are grouped together into one Incident in a given time frame.

D. Alerts with same causality chains that occur within a given time frame are grouped together into an Incident.

A. File Search and Destroy

B. File Seek and Destroy

C. File Seek and Repair

D. File Search and Repair

A. Quarantine disables the network adapters and locks down access preventing any communications with the endpoint.

B. Quarantine removes a specific file from its location on a local or removable drive to a protected folder and prevents it from being executed.

C. Quarantine takes ownership of the files and folders and prevents execution through access control.

D. Quarantine prevents an endpoint from communicating with anything besides the listed exceptions in the agent profile and Cortex XDR.

A. A dataset is a database; presets is a field.

B. A dataset is a Cortex data lake data source only; presets are built-in data source.

C. A dataset is a built-in or third-party source; presets group XDR data fields.

D. A dataset is a third-party data source; presets are built-in data source.

A. The ultimate goal of any exploit is to reach the kernel.

B. Application exploits leverage kernel vulnerability.

C. The ultimate goal of any exploit is to reach the application.

D. Kernel exploits are easier to prevent then application exploits.