What is by far the most common tactic used by ransomware to shut down a victim's operation?

• A.restricting access to administrative accounts to the victim
• B.preventing the victim from being able to access APIs to cripple infrastructure
• C.encrypting certain files to prevent access by the victim
• D.denying traffic out of the victims network until payment is received

Comment: *

Name: *

Email: *

Verification: *

When viewing the incident directly, what is the "assigned to" field value of a new Incident that was just reported to Cortex?

• A.New
• B.Unassigned
• C.It is blank
• D.Pending

Comment: *

Name: *

Email: *

Verification: *

Live Terminal uses which type of protocol to communicate with the agent on the endpoint?

• A.NetBIOS over TCP
• B.TCP, over port 80
• C.UDP and a random port
• D.WebSocket

Comment: *

Name: *

Email: *

Verification: *

What is the outcome of creating and implementing an alert exclusion?

• A.The Cortex XDR console will delete those alerts and block ingestion of them in the future.
• B.The Cortex XDR agent will not create an alert for this event in the future.
• C.The Cortex XDR agent will allow the process that was blocked to run on the endpoint.
• D.The Cortex XDR console will hide those alerts.

Comment: *

Name: *

Email: *

Verification: *

Cortex XDR Analytics can alert when detecting activity matching the following MITRE ATT&CKTM techniques.

• A.Exfiltration, Command and Control, Collection
• B.Exfiltration, Command and Control, Privilege Escalation
• C.Exfiltration, Command and Control, Lateral Movement
• D.Exfiltration, Command and Control, Impact

Comment: *

Name: *

Email: *

Verification: *