SecOps-Pro 試験問題を無料オンラインアクセス

During a sophisticated cyber attack, a company experiences a stealthy, multivector intrusion that evades detection by traditional security tools.
The company requires a solution that will correlate and analyze the disparate attack indicators across its network, endpoints, and cloud environments to uncover the full scope of the breach and take immediate automated response actions.
Which solution should be recommended?

• A.XDR
• B.EDR
• C.XSOAR
• D.SIEM

Which action should an administrator take to create automated response actions when a user account is compromised?

• A.Create a script in Cortex XSOAR that will run a playbook based on the scenario.
• B.Map the events as a type of Cortex XSOAR incident, then run a playbook.
• C.Create playbook triggers in Cortex XSIAM and run playbooks for each alert.
• D.Run a custom script from the Cortex XDR script library.

What is the function of a Causality View?

• A.To provide users access to collaborate and execute CLI commands in Cortex XDR and Cortex XSIAM
• B.To consolidate multiple security tools into a single interface to improve analyst productivity
• C.To present alerts from multiple data sources as individual incidents in the console
• D.To present the alerts and process execution chain of all activity pertaining to the same event

Which two types of tasks are supported in Cortex XSIAM playbooks? (Choose two.)

• A.Conditional
• B.Data collection
• C.Script creation
• D.Sub-playbook

Which attribute applies to script creation in Cortex XSOAR?

• A.Can be written using XQL
• B.Can be executed only with limited permissions
• C.Can be protected with a password
• D.Can be scheduled to run at a later time and day