Which two formats are supported by Whitelist? (Choose two)

• A.CSV
• B.CIDR
• C.Regex
• D.STIX

Comment: *

Name: *

Email: *

Verification: *

What are two manual actions allowed on War Room entries? (Choose two.)

• A.Mark as note
• B.Mark as evidence
• C.Mark as scheduled entry
• D.Mark as artifact

Comment: *

Name: *

Email: *

Verification: *

An administrator of a Cortex XDR protected production environment would like to test its ability to protect users from a known flash player exploit.
What is the safest way to do it?

• A.The administrator should create a non-production Cortex XDR test environment that accurately represents the production environment, introduce the weaponized flash file, and monitor the Events tab on the Cortex XDR console.
• B.The administrator should use the Cortex XDR tray icon to confirm his corporate laptop is fully protected then open the weaponized flash file on his machine, and monitor the Events tab on the Cortex XDR console.
• C.The administrator should attach a copy of the weapomzed flash file to an email, send the email to a selected group of employees, and monitor the Events tab on the Cortex XDR console
• D.The administrator should place a copy of the weaponized flash file on several USB drives, scatter them around the office and monitor the Events tab on the Cortex XDR console

Comment: *

Name: *

Email: *

Verification: *

The prospect is deciding whether to go with a phishing or a ServiceNow use case as part of their POC We have integrations for both but a playbook for phishing only Which use case should be used for the POC?

• A.neither
• B.either
• C.ServiceNow
• D.phishing

Comment: *

Name: *

Email: *

Verification: *

Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types? (Choose three.)

• A.Drop new incidents of the same type that contain similar information
• B.Define whether a playbook runs automatically when an incident type is encountered
• C.Set reminders for an incident SLA
• D.Define the way that incidents of a specific type are displayed in the system
• E.Add new fields to an incident type

Comment: *

Name: *

Email: *

Verification: *