In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)

• A.OS
• B.hostname
• C.Domain/workgroup membership
• D.attack threat intelligence tag
• E.quarantine status

Comment: *

Name: *

Email: *

Verification: *

The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.) SUCCESS

• A.The modified script attempted to access a dictionary key that did not exist in the dictionary named
  "data"
• B.The dictionary was defined incorrectly in the second script.
• C.The modified scnpt was run in the wrong Docker image
• D.The modified script required a different parameter to run successfully.

Comment: *

Name: *

Email: *

Verification: *

"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?

• A.@Bob
• B./invite Bob
• C.!invite Bob
• D.#Bob

Comment: *

Name: *

Email: *

Verification: *

Which two formats are supported by Whitelist? (Choose two)

• A.CSV
• B.Regex
• C.STIX
• D.CIDR

Comment: *

Name: *

Email: *

Verification: *

If you have a playbook task that errors out. where could you see the output of the task?

• A.War Room of the incident
• B./var/log/messages
• C.Demisto Audit log
• D.Playbook Editor

Comment: *

Name: *

Email: *

Verification: *