Which two items are stitched to the Cortex XDR causality chain'' (Choose two)

• A.firewall alert
• B.SIEM alert
• C.full URL
• D.registry set value

Comment: *

Name: *

Email: *

Verification: *

How can the required log ingestion license be determined when sizing a Cortex XSIAM deployment?

• A.Ask the customer for average log ingestion estimates from their existing SIEM.
• B.Count the number of correlation sources and multiply by desired retention days.
• C.Use the Cortex Data Lake Calculator to estimate the volume of third-party logs.
• D.Ask the customer to provide average daily alert volume.

Comment: *

Name: *

Email: *

Verification: *

Where is the output of the task visible when a playbook task errors out?

• A.XSOAR audit log
• B.War Room of the incident
• C./var/log/messages
• D.playbook editor

Comment: *

Name: *

Email: *

Verification: *

When analyzing logs for indicators, which are used for only BIOC identification'?

• A.techniques
• B.artifacts
• C.error messages
• D.observed activity

Comment: *

Name: *

Email: *

Verification: *

An antivirus refresh project was initiated by the IT operations executive. Who is the best source for discussion about the project's operational considerations'?

• A.SOC manager
• B.desktop engineer
• C.SOC analyst
• D.endpoint manager

Comment: *

Name: *

Email: *

Verification: *