Loading demo links...
Showing 1–12 of 12 questions
The first step of incident triage in XSIAM is to determine what about the incident?
Select an option, then click Submit answer.
Threat intelligence feeds provide XSIAM with updated information about what?
Select an option, then click Submit answer.
In Cortex XSIAM, alerts from multiple sources are combined into what for investigation?
Select an option, then click Submit answer.
A playbook in Cortex XSIAM is best described as what?
Select an option, then click Submit answer.
An XQL query begins by selecting which element of the data?
Select an option, then click Submit answer.
Endpoint groups in XSIAM are used to apply what consistently to many endpoints?
Select an option, then click Submit answer.
Which two actions are containment measures? (Choose two.)
Select all that apply, then click Submit answer.
Which two are examples of threat intelligence indicators? (Choose two.)
Select all that apply, then click Submit answer.
Which two are common playbook enrichment actions? (Choose two.)
Select all that apply, then click Submit answer.
CORRECT TEXT
The software installed on endpoints to collect data and enforce prevention is the ______.
Answer is in the explanation below.
DRAG DROP
Match each intelligence term to its meaning.
Items to match: Indicator of compromise, Threat actor profile, Attack surface management, Threat feed source.
Answer is in the explanation below.
DRAG DROP
Match each playbook element to its role.
Items to match: Trigger element component, Task element component, Condition element component, Integration element component.
Answer is in the explanation below.
