PSE-Cortex-Pro-24 무료 덤프문제 온라인 액세스

Which two actions are required to add indicators to the whitelist? (Choose two.)

• A.Upload an external file named "whitelist" to the Indicators page.
• B.Upload an external file named "whitelist" to the Whitelist page.
• C.Select the indicators and click "Delete and Whitelist" in the Indicators page.
• D.Click "New Whitelisted Indicator" in the Whitelist page.

Which task setting allows context output to a specific key?

• A.extend context
• B.stop on errors
• C.lags
• D.task output

When running a Cortex XSIAM proof of value (POV), why is it important to deploy the Cortex XDR agent?

• A.It is used to enforce license compliance.
• B.It runs automation daybooks on the endpoints.
• C.It provides telemetry for stitching and analytics.
• D.It will prevent all threats in the environment.

Which service helps uncover attackers wherever they hide by combining world-class threat hunters with Cortex XDR technology that runs on integrated endpoint, network, and cloud data sources?

• A.Threat Intelligence Platform (TIP)
• B.Managed Threat Hunting
• C.virtual desktop infrastructure (VDI)
• D.Cloud Identity Engine

An Administrator is alerted to a Suspicious Process Creation security event from multiple users.
The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )

• A.Contact support and ask for a security exception.
• B.Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist
• C.In the Cortex XDR security event, review the specific parent process, child process, and command line arguments
• D.With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module