Question 1

Which of the following protection modules is checked first in the Cortex XDR Windows agent malware protection flow?

Options :

A : Hash Verdict Determination

B : Behavioral Threat Protection

C : Restriction Policy

D : Child Process Protection

Answer: A

Question 2

Which statement is correct based on the report output below?

Options :

A : Host Inventory Data Collection is enabled.

B : 3,297 total incidents have been detected.

C : Forensic inventory data collection is enabled.

D : 133 agents have full disk encryption.

Answer: C

Question 3

In the deployment of which Broker VM applet are you required to install a strong cipher SHA256-based SSL certificate?

Options :

A : Agent Proxy

B : Agent Installer and Content Caching

C : Syslog Collector

D : CSV Collector

Answer: B

Question 4

As a Malware Analyst working with Cortex XDR you notice an alert suggesting that there was aprevented attempt to download Cobalt Strike on one of your servers. Days later, you learn about amassive ongoing supply chain attack. Using Cortex XDR you recognize that your server wascompromised by the attack and that Cortex XDR prevented it. What steps can you take to ensure thatthe same protection is extended to all your servers?

Options :

A : Create Behavioral Threat Protection (BTP) rules to recognize and prevent the activity.

B : Enable DLL Protection on all servers but there might be some false positives.

C : Create IOCs of the malicious files you have found to prevent their execution.

D : Enable Behavioral Threat Protection (BTP) with cytool to prevent the attack from spreading.

Answer: A

Question 5

Which license is required when deploying Cortex XDR agent on Kubernetes Clusters as a DaemonSet?

Options :

A : Cortex XDR Pro per TB

B : Host Insights

C : Cortex XDR Pro per Endpoint

D : Cortex XDR Cloud per Host

Answer: D

Higher Test Marks with Free Online XDR-Analyst Exam Practice

Buying Options: