XDR-Analyst 무료 덤프문제 온라인 액세스

In the Cortex XDR console, from which two pages are you able to manually perform the agent upgrade action? (Choose two.)

• A.Action Center
• B.Agent Installations
• C.Endpoint Administration
• D.Asset Management

When creating a BIOC rule, which XQL query can be used?

• A.dataset = xdr_data
  | filter event_sub_type = PROCESS_START and
  action_process_image_name ~= ".*?\.(?:pdf|docx)\.exe"
• B.dataset = xdr_data
  | filter action_process_image_name ~= ".*?\.(?:pdf|docx)\.exe"
  | fields action_process_image
• C.dataset = xdr_data
  | filter event_behavior = true
  event_sub_type = PROCESS_START and
  action_process_image_name ~= ".*?\.(?:pdf|docx)\.exe"
• D.dataset = xdr_data
  | filter event_type = PROCESS and
  event_sub_type = PROCESS_START and
  action_process_image_name ~= ".*?\.(?:pdf|docx)\.exe"

Cortex XDR Analytics can alert when detecting activity matching the following MITRE ATT&CKTM techniques.

• A.Exfiltration, Command and Control, Privilege Escalation
• B.Exfiltration, Command and Control, Collection
• C.Exfiltration, Command and Control, Impact
• D.Exfiltration, Command and Control, Lateral Movement

What kind of malware uses encryption, data theft, denial of service, and possibly harassment to take advantage of a victim?

• A.Rootkit
• B.Ransomware
• C.Keylogger
• D.Worm

When is the wss (WebSocket Secure) protocol used?

• A.when the Cortex XDR agent connects to WildFire to upload files for analysis
• B.when the Cortex XDR agent establishes a bidirectional communication channel
• C.when the Cortex XDR agent downloads new security content
• D.when the Cortex XDR agent uploads alert data