Which two types of indicators of compromise (IOCs) are available for creation in Cortex XDR?
(Choose two.)

• A.file path
• B.registry
• C.hash
• D.hostname

Comment: *

Name: *

Email: *

Verification: *

Which two troubleshooting steps should be taken when an integration is failing to connect?
(Choose two.)

• A.Ensure the playbook is set to run in quiet mode to minimize CPU usage and suppress errors
• B.Check the integration logs and enable a higher logging level, if needed, view the specific error.
• C.Confirm the integration credentials or API keys are valid.
• D.Confirm there are no dashboards or reports configured to use that integration instance.

Comment: *

Name: *

Email: *

Verification: *

Which two entities can be created as a behavioral indicator of compromise (BIOC)? (Choose two.)

• A.network
• B.data
• C.process
• D.event alert

Comment: *

Name: *

Email: *

Verification: *

What is the primary function of an engine in Cortex XSOAR?

• A.To manage multiple Cortex XSOAR tenants
• B.To execute playbooks, scripts, commands, and integrations
• C.To store and manage incident data, remediation plans, and documentation
• D.To provide a user interface for security analysts

Comment: *

Name: *

Email: *

Verification: *

Why is it important to document notes from the Proof of Value (POV) for post-sales hand off?

• A.To ensure the implementation teams understand the customer use cases and priorities
• B.To generate additional training material for the POV's production implementation
• C.To allow implementation teams to bypass scooping exercises and shorten delivery time
• D.To certify that the POV was completed and meets all customer requirements

Comment: *

Name: *

Email: *

Verification: *