PCDRA 무료 덤프문제 온라인 액세스

Under which conditions is Local Analysis evoked to evaluate a file before the file is allowed to run?

• A.The endpoint is disconnected or the verdict from WildFire is of a type malware.
• B.The endpoint is disconnected or the verdict from WildFire is of a type benign.
• C.The endpoint is disconnected or the verdict from WildFire is of a type unknown.
• D.The endpoint is disconnected or the verdict from WildFire is of a type grayware.

Which profiles can the user use to configure malware protection in the Cortex XDR console?

• A.Anti-Malware profile
• B.Malware Detection profile
• C.Malware Protection profile
• D.Malware profile

When viewing the incident directly, what is the "assigned to" field value of a new Incident that was just reported to Cortex?

• A.New
• B.Unassigned
• C.It is blank
• D.Pending

Where would you go to add an exception to exclude a specific file hash from examination by the Malware profile for a Windows endpoint?

• A.From the rules menu select new exception, fill out the criteria, choose the scope to apply it to, hit save.
• B.Find the exceptions profile attached to the endpoint, under process exceptions select local analysis, paste the hash and save.
• C.Find the Malware profile attached to the endpoint, Under Portable Executable and DLL Examination add the hash to the allow list.
• D.In the Action Center, choose Allow list, select new action, select add to allow list, add your hash to the list, and apply it.

In incident-related widgets, how would you filter the display to only show incidents that were "starred"?

• A.Create a custom XQL widget
• B.Create a custom report and filter on starred incidents
• C.Click the star in the widget
• D.This is not currently supported