CloudSec-Pro 試験問題を無料オンラインアクセス

How can a company use Cortex XSIAM to automate security operations and enhance threat detection?

• A.Review all security logs on a daily basis and automatically create cases.
• B.Decrease the number of analysts needed to review an organization security posture.
• C.Configure playbooks to automate response actions for detected threats.
• D.Automatically implement firewall rules based on detected vulnerabilities.

Which three elements are part of SSH Events in Host Observations? (Choose three.)

• A.System calls
• B.Command
• C.Startup process
• D.Process path
• E.User

A security team notices a number of anomalies under Monitor > Events. The incident response team works with the developers to determine that these anomalies are false positives. What will be the effect if the security team chooses to Relearn on this image?

• A.The model is retained, and any new behavior observed during the new learning period will be added to the existing model.
• B.The model is deleted, and Defender will relearn for 24 hours.
• C.The anomalies detected will automatically be added to the model.
• D.The model is deleted and returns to the initial learning state.

Which policy type in Prisma Cloud can protect against malware?

• A.Config
• B.Event
• C.Network
• D.Data

How are the following categorized?
Backdoor account access Hijacked processes Lateral movement
Port scanning

• A.admission controllers
• B.models
• C.incidents
• D.audits