Question 1

What is the primary function of an engine in Cortex XSOAR?

Options :

A : To execute playbooks, scripts, commands, and integrations

B : To manage multiple Cortex XSOAR tenants

C : To provide a user interface for security analysts

D : To store and manage incident data, remediation plans, and documentation

Answer: A

Question 2

Which Cortex XDR capability allows for the immediate termination of a process discovered during investigation of a security event?

Options :

A : file explorer

B : Log stitching

C : live sensor

D : live terminal

Answer: D

Question 3

Which feature of Cortex XSIAM displays an entire picture of an attack, including the originating process or delivery point?

Options :

A : Sample analysis

B : Correlation rule

C : Causality View

D : Automation playbook

Answer: C

Question 4

Which Cortex XDR capability prevents running malicious files from USB-connected removable equipment?

Options :

A : Device customization

B : Agent configuration

C : Agent management

D : Restrictions profile

Answer: D

Question 5

What is the result of creating an exception from an exploit security event?

Options :

A : White lists the process from Wild Fire analysis

B : exempts the user from generating events for 24 hours

C : exempts administrators from generating alerts for 24 hours

D : disables the triggered EPM for the host and process involve

Answer: D