PCDRA 무료 덤프문제 온라인 액세스

After scan, how does file quarantine function work on an endpoint?

• A.Quarantine takes ownership of the files and folders and prevents execution through access control.
• B.Quarantine prevents an endpoint from communicating with anything besides the listed exceptions in the agent profile and Cortex XDR.
• C.Quarantine disables the network adapters and locks down access preventing any communications with the endpoint.
• D.Quarantine removes a specific file from its location on a local or removable drive to a protected folder and prevents it from being executed.

When investigating security events, which feature in Cortex XDR is useful for reverting the changes on the endpoint?

• A.Remediation Automation
• B.Remediation Suggestions
• C.Machine Remediation
• D.Automatic Remediation

As a Malware Analyst working with Cortex XDR you notice an alert suggesting that there was a prevented attempt to open a malicious Word document. You learn from the WildFire report and AutoFocus that this document is known to have been used in Phishing campaigns since 2018. What steps can you take to ensure that the same document is not opened by other users in your organization protected by the Cortex XDR agent?

• A.Enable DLL Protection on all endpoints but there might be some false positives.
• B.Create Behavioral Threat Protection (BTP) rules to recognize and prevent the activity.
• C.No step is required because Cortex shares IOCs with our fellow Cyber Threat Alliance members.
• D.No step is required because the malicious document is already stopped.

Which of the following Live Terminal options are available for Android systems?

• A.Run Android commands.
• B.Stop an app.
• C.Live Terminal is not supported.
• D.Run APK scripts.

Phishing belongstowhich of the following MITRE ATT&CK tactics?

• A.Persistence, Command and Control
• B.Initial Access, Persistence
• C.Reconnaissance, Persistence
• D.Reconnaissance, Initial Access