Question 1 · 35 in bank
Which response action in Cortex XSIAM would be unavailable to a SOC analyst investigating an incident involving a Linux server?
Show answer
Answer: A
Palo Alto Networks Security Operations Professional35 questions across 4 pages are complete and free, with no account or card.
35 questions in this bank
Free access · progress saved on this device
Which response action in Cortex XSIAM would be unavailable to a SOC analyst investigating an incident involving a Linux server?
Answer: A
What is the role of content packs in Cortex XSOAR?
Answer: A
Which two types of content can be installed or upgraded through a Cortex XSIAM content pack? (Choose two.)
Answer: AC
Which component of Cortex XDR is designed to detect insider threats?
Answer: B
A file hash is evaluated a Cortex XSOAR by using two unique threat feeds: VirusTotal feed (rating of B- usually reliable) and the file verdict is malicious AlienVault feed (rating of B- usually reliable) and the file verdict is benign What is the file verdict in XSOAR?
Answer: B
A customer is investigating a security incident in which unusual network traffic is observed and a malicious process is identified on an endpoint. Which Cortex XDR capability assists with correlating firewall network logs and endpoint data in this environment?
Answer: A
Where can an administrator begin to grant a new non-SSO user access to a Cortex XDR tenant?
Answer: A
Which two statements apply to creating scripts in Cortex XSOAR? (Choose two.)
Answer: AD
Which two types of tasks are supported in Cortex XSIAM playbooks? (Choose two.)
Answer: CD
Which scripting language would create a custom widget in Cortex XDR that shows the top five accounts with failed Windows logons in the past 24 hours?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SecOps-Pro practice, question 1. 35 questions available.
Version 1.0.0. How we source questions