A. Cortex XDR Analytics allows to interfere with the pattern as soon as it is observed on the endpoint.
B. Cortex XDR Analytics allows to interfere with the pattern as soon as it is observed on the firewall.
C. Cortex XDR Analytics does not have to interfere with the pattern as soon as it is observed on the endpoint in order to prevent the attack.
D. Cortex XDR Analytics does not interfere with the pattern as soon as it is observed on the endpoint.
A. The level of risk is assigned to the script upon import.
B. Any script can be imported including Visual Basic (VB) scripts.
C. Any version of Python script can be run.
D. The script is run on the machine uploading the script to ensure that it is operational.
A. under Response --> Action Center
B. next to relevant Key Artifacts in the incidents details page
C. under the gear icon --> Agent Audit Logs
D. on the HUB page at apps.paloaltonetworks.com
A. NetBIOS over TCP
B. UDP and a random port
C. WebSocket
D. TCP, over port 80
A. The ransomware attackers hope to trace the financial trail back and steal more from traditional banking institutions. -
B. Nation-states enforce the return of system access through the use of laws and regulation.
C. Failure to restore access to systems undermines the scheme because others will not believe their valuables would be returned.
D. There is organized crime governance among attackers that requires the return of access to remain in good standing.
A. The Cortex XDR console will hide those alerts.
B. The Cortex XDR agent will allow the process that was blocked to run on the endpoint.
C. The Cortex XDR agent will not create an alert for this event in the future.
D. The Cortex XDR console will delete those alerts and block ingestion of them in the future.
A. 512GB disk space
B. 2GB disk space
C. 256GB disk space
D. 1GB disk space
A. Every alert creates a new Incident.
B. Alerts that occur within a three-hour time frame are grouped together into one Incident.
C. Only alerts with the same host are grouped together into one Incident in a given time frame.
D. Alerts with same causality chains that occur within a given time frame are grouped together into an Incident.
A. destination port
B. full path
C. App-ID
D. e-mail address
A. Python 3 with specific XDR Python libraries developed by Palo Alto Networks
B. Python 2 and 3 with standard Python libraries
C. Python 2 and 3 with specific XDR Python libraries developed by Palo Alto Networks
D. Python 3 with standard Python libraries
