XDR-Analyst 試験問題を無料オンラインアクセス

Which of the following is an example of a successful exploit?

• A.executing a process executable for well-known and signed software.
• B.identifying vulnerable services on a server.
• C.a user executing code which takes advantage of a vulnerability on a local service.
• D.connecting unknown media to an endpoint that copied malware due to Autorun.

What functionality of the Broker VM would you use to ingest third-party firewall logs to the Cortex Data Lake?

• A.DB Collector
• B.Syslog Collector
• C.Netflow Collector
• D.Pathfinder

An attacker tries to load dynamic libraries on macOS from an unsecure location. Which Cortex XDR module can prevent this attack?

• A.Kernel Integrity Monitor (KIM)
• B.Hot Patch Protection
• C.Dylib Hijacking
• D.DDL Security

In Cortex XDR management console scheduled reports can be forwarded to which of the following applications/services?

• A.Slack
• B.Jira
• C.Salesforce
• D.Service Now

Live Terminal uses which type of protocol to communicate with the agent on the endpoint?

• A.WebSocket
• B.NetBIOS over TCP
• C.UDP and a random port
• D.TCP, over port 80