Cortex XDR Analytics can alert when detecting activity matching the following MITRE ATT&CKTM techniques.

• A.Exfiltration, Command and Control, Privilege Escalation
• B.Exfiltration, Command and Control, Collection
• C.Exfiltration, Command and Control, Lateral Movement
• D.Exfiltration, Command and Control, Impact

Comment: *

Name: *

Email: *

Verification: *

In Windows and macOS you need to prevent the Cortex XDR Agent from blocking execution of a file based on the digital signer. What is one way to add an exception for the singer?

• A.In the Restrictions Profile, add the file name and path to the Executable Files allow list.
• B.Add the signer to the allow list under the action center page.
• C.Create a new rule exception and use the singer as the characteristic.
• D.Add the signer to the allow list in the malware profile.

Comment: *

Name: *

Email: *

Verification: *

How does Cortex XDR agent for Windows prevent ransomware attacks from compromising the file system?

• A.by utilizing decoy Files.
• B.by retrieving the encryption key.
• C.by patching vulnerable applications.
• D.by encrypting the disk first.

Comment: *

Name: *

Email: *

Verification: *

Which statement is true for Application Exploits and Kernel Exploits?

• A.The ultimate goal of any exploit is to reach the application.
• B.The ultimate goal of any exploit is to reach the kernel.
• C.Application exploits leverage kernel vulnerability.
• D.Kernel exploits are easier to prevent then application exploits.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is NOT a precanned script provided by Palo Alto Networks?

• A.quarantine_file
• B.process_kill_name
• C.list_directories
• D.delete_file

Comment: *

Name: *

Email: *

Verification: *