Which type of BIOC rule is currently available in Cortex XDR?

• A.Threat Actor
• B.Dropper
• C.Discovery
• D.Network

Comment: *

Name: *

Email: *

Verification: *

To create a BIOC rule with XQL query you must at a minimum filter on which field in order for it to be a valid BIOC rule?

• A.threat_event
• B.causality_chain
• C.endpoint_name
• D.event_type

Comment: *

Name: *

Email: *

Verification: *

Which profiles can the user use to configure malware protection in the Cortex XDR console?

• A.Malware profile
• B.Malware Detection profile
• C.Malware Protection profile
• D.Anti-Malware profile

Comment: *

Name: *

Email: *

Verification: *

With a Cortex XDR Prevent license, which objects are considered to be sensors?

• A.Cortex XDR agents
• B.Third-Party security devices
• C.Syslog servers
• D.Palo Alto Networks Next-Generation Firewalls

Comment: *

Name: *

Email: *

Verification: *

A Linux endpoint with a Cortex XDR Pro per Endpoint license and Enhanced Endpoint Data enabled has reported malicious activity, resulting in the creation of a file that you wish to delete. Which action could you take to delete the file?

• A.Open X2go from the Cortex XDR console and delete the file via X2go.
• B.Manually remediate the problem on the endpoint in question.
• C.Initiate Remediate Suggestions to automatically delete the file.
• D.Open an NFS connection from the Cortex XDR console and delete the file.

Comment: *

Name: *

Email: *

Verification: *