NEW QUESTION 34
An adversary is attempting to communicate with malware running on your network for the purpose of controlling malware activities or for ex filtrating data from your network. Which Cortex XDR Analytics alert is this activity most likely to trigger’?

NEW QUESTION 35
When analyzing logs for indicators, which are used for only BIOC identification’?

NEW QUESTION 36
Given the exception thrown in the accompanying image by the Demisto REST API integration, which action would most likely solve the problem?

Which two playbook functionalities allow looping through a group of tasks during playbook execution?
(Choose two.)

NEW QUESTION 37
A General Purpose Dynamic Section can be added to which two layouts for incident types? (Choose two)

NEW QUESTION 38
How can you view all the relevant incidents for an indicator?

NEW QUESTION 39
In the DBotScore context field, which context key would differentiate between multiple entries for the same indicator in a multi-TIP environment?

NEW QUESTION 40
Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable equipment?

NEW QUESTION 41
When analyzing logs for indicators, which are used for only BIOC identification’?

NEW QUESTION 42
An administrator of a Cortex XDR protected production environment would like to test its ability to protect users from a known flash player exploit.
What is the safest way to do it?

NEW QUESTION 43
Which Cortex XDR capability extends investigations to an endpoint?

NEW QUESTION 44
How many use cases should a POC success criteria document include?

NEW QUESTION 45
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three.)

NEW QUESTION 46
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )

NEW QUESTION 47
During the TMS instance activation, a tenant (Customer) provides the following information for the fields in the Activation – Step 2 of 2 window.

During the service instance provisioning which three DNS host names are created? (Choose three.)

NEW QUESTION 48
When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?

NEW QUESTION 49
The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?

NEW QUESTION 50
Which option is required to prepare the VDI Golden Image?

NEW QUESTION 51
If you have a playbook task that errors out. where could you see the output of the task?

NEW QUESTION 52
What are process exceptions used for?

NEW QUESTION 53
Which CLI query would bring back Notable Events from Splunk?
A)

B)

C)

D)