SecOps-Pro practice questions 21–30

1. Question 21 · 35 in bank

   How can an administrator run a Cortex XSOAR playbook regularly at a specific time and day of the week?

   • ABy configuring the playbook to run on a specific date and time
   • BBy creating a job that will run the playbook
   • CBy creating a scheduled report that will run the playbook
   • DBy creating a script that will run the playbook

   Show answer

   Answer: B

   Next question

2. Question 22 · 35 in bank

   Select 2

   A security auditor must ensure adherence to which two regulatory compliance frameworks when reviewing a financial institution’s data protection policies? (Choose two.)

   • AGDPR
   • BNERC CIP
   • CPCI DSS
   • DFERPA

   Show answer

   Answer: AC

   Next question

3. Question 23 · 35 in bank

   Which task should a threat hunter include in the investigation when a Cortex XDR incident contains alertsout a malicious process?

   • AImmediately isolate the endpoint and delete the identified file.
   • BSearch for the SHA256 file hash on other endpoints in the environment.
   • CAdd the SHA256 file hash to the Cortex XDR global block list.
   • DDisable the account of the user responsible for initiating the process.

   Show answer

   Answer: B

   Next question

4. Question 24 · 35 in bank

   Where can an analyst look to determine the root cause of a causality chain?

   • ARoot cause analysis
   • BCausality Group Owner (CGO)
   • CBehavioral indicators of compromise (BIOCs)
   • DIndicators of compromise (IOCs)

   Show answer

   Answer: B

   Next question

5. Question 25 · 35 in bank

   Which component of Cortex XSIAM maps events ingested from third-party sources to a standardized format?

   • AData model
   • BBroker VM
   • CParsing rules
   • DXDR Collector

   Show answer

   Answer: C

   Next question

6. Question 26 · 35 in bank

   Which attribute applies to script creation in Cortex XSOAR?

   • ACan be scheduled to run at a later time and day
   • BCan be executed only with limited permissions
   • CCan be written using XQL
   • DCan be protected with a password

   Show answer

   Answer: D

   Next question

7. Question 27 · 35 in bank

   How is internal proprietary source code classified?

   • AConfidential
   • BRestricted
   • CInternal Use Only
   • DPrivate

   Show answer

   Answer: B

   Next question

8. Question 28 · 35 in bank

   What will consolidate the final verdict and a detailed trace of the file’s behavior when an artifact’s hash is automatically submitted to Palo Alto Network’s cloud-based service for static and dynamic analysis?

   • ASmartScore incident page
   • BExternal threat feed indicator
   • CCortex XDR artifact summary
   • DWildFire analysis report

   Show answer

   Answer: D

   Next question

9. Question 29 · 35 in bank

   An organization ingests security data from dozens of different sensors, including endpoint agents and network firewalls. These low-fidelity events from all the sources need to become part of a cohesive narrative for a security incident. Which specific automated function performs this task?

   • ALog correlation
   • BEvent forwarding
   • CIncident management
   • DLog stitching

   Show answer

   Answer: D

   Next question

10. Question 30 · 35 in bank

    An organization requires a specific user to have the ability to investigate alerts and perform remediation tasks, such as terminating malicious processes and isolating compromised hosts, without having full administrative control over the tenant settings. Which predefined role should be assigned to this user in Cortex XDR?

    • AViewer
    • BInvestigator
    • CDeployment Admin
    • DResponder

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SecOps-Pro practice, question 21. 35 questions available.