The customer has indicated they need EDR data collection capabilities, which Cortex XDR license is required?
An adversary is attempting to communicate with malware running on your network for the purpose of controlling malware activities or for ex filtrating data from your network. Which Cortex XDR Analytics alert is this activity most likely to trigger'?
Which two filter operators are available in Cortex XDR? (Choose two.)
If an anomalous process is discovered while investigating the cause of a security event, you can take immediate action to terminate the process or the whole process tree, and block processes from running by initiating which Cortex XDR capability?
Which process in the causality chain does the Cortex XDR agent identify as triggering an event sequence?
A customer wants to modify the retention periods of their Threat logs in Cortex Data Lake.
Where would the user configure the ratio of storage for each log type?
In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )
How does an "inline" auto-extract task affect playbook execution?
Which option is required to prepare the VDI Golden Image?
What is the difference between an exception and an exclusion?