Which type of BIOC rule is currently available in Cortex XDR?

• A.Network
• B.Discovery
• C.Dropper
• D.Threat Actor

Comment: *

Name: *

Email: *

Verification: *

What are two purposes of "Respond to Malicious Causality Chains" in a Cortex XDR Windows Malware profile? (Choose two.)

• A.Automatically close the connections involved in malicious traffic.
• B.Automatically kill the processes involved in malicious activity.
• C.Automatically terminate the threads involved in malicious activity.
• D.Automatically block the IP addresses involved in malicious traffic.

Comment: *

Name: *

Email: *

Verification: *

Which of the following protection modules is checked first in the Cortex XDR Windows agent malware protection flow?

• A.Hash Verdict Determination
• B.Behavioral Threat Protection
• C.Restriction Policy
• D.Child Process Protection

Comment: *

Name: *

Email: *

Verification: *

Phishing belongs which of the following MITRE ATT&CK tactics?

• A.Persistence, Command and Control
• B.Reconnaissance, Initial Access
• C.Initial Access, Persistence
• D.Reconnaissance, Persistence

Comment: *

Name: *

Email: *

Verification: *

While working the alerts involved in a Cortex XDR incident, an analyst has found that every alert in this incident requires an exclusion. What will the Cortex XDR console automatically do to this incident if all alerts contained have exclusions?

• A.create an exception to prevent future false positives
• B.mark the incident as Resolved - False Positive
• C.create a BIOC rule excluding this behavior
• D.mark the incident as Unresolved

Comment: *

Name: *

Email: *

Verification: *