Which two types of indicators of compromise (IOCs) are available for creation in Cortex XDR?
(Choose two.)

• A.Internet Protocol (IP)
• B.registry entry
• C.domain
• D.Endport hostname

Comment: *

Name: *

Email: *

Verification: *

Which Cortex XSIAM license is required if an organization needs to protect a cloud Kubernetes host?

• A.Cortex XSIAM Enterprise
• B.Cortex XSIAM Enterprise Plus
• C.Attack Surface Management
• D.Identity Threat Detection and Response

Comment: *

Name: *

Email: *

Verification: *

Which two statements apply to widgets? (Choose two.)

• A.Dashboards cannot be shared across an organization.
• B.All widgets are customizable.
• C.A widget can have its own time range that is different from the rest of the dashboard.
• D.Some widgets cannot be changed.

Comment: *

Name: *

Email: *

Verification: *

A customer wants to modify the retention periods of their Threat logs in Cortex Data Lake.
Where would the user configure the ratio of storage for each log type?

• A.Write a GPO for each endpoint agent to check in less often
• B.It is not possible to configure Cortex Data Lake quota for specific log types.
• C.Go to the Cortex Data Lake App in Cloud Services, then choose Configuration and modify the Threat Quota
• D.Within the TMS, create an agent settings profile and modify the Disk Quota value

Comment: *

Name: *

Email: *

Verification: *

When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?

• A.SplunkGO integration
• B.Cortex XSOAR TA App for Splunk
• C.splunk-get-alerts integration command
• D.SplunkSearch automation

Comment: *

Name: *

Email: *

Verification: *