XDR-Analyst 試験問題を無料オンラインアクセス

What is by far the most common tactic used by ransomware to shut down a victim's operation?

• A.encrypting certain files to prevent access by the victim
• B.preventing the victim from being able to access APIs to cripple infrastructure
• C.restricting access to administrative accounts to the victim
• D.denying traffic out of the victims network until payment is received

Which of the following Live Terminal options are available for Android systems?

• A.Run APK scripts.
• B.Run Android commands.
• C.Live Terminal is not supported.
• D.Stop an app.

What does the following output tell us?

• A.There is one low severity incident.
• B.There is one informational severity alert.
• C.Host shpapy_win10 had the most vulnerabilities.
• D.This is an actual output of the Top 10 hosts with the most malware.

What is the action taken out by Managed Threat Hunting team for Zero Day Exploits?

• A.MTH pushes content updates to prevent against the zero-day exploits.
• B.MTH researches for threats in the logs and reports to engineering.
• C.MTH researches for threats in the tenant and generates a report with the findings.
• D.MTH runs queries and investigative actions and no further action is taken.

As a Malware Analyst working with Cortex XDR you notice an alert suggesting that there was a prevented attempt to download Cobalt Strike on one of your servers. Days later, you learn about a massive ongoing supply chain attack. Using Cortex XDR you recognize that your server was compromised by the attack and that Cortex XDR prevented it. What steps can you take to ensure that the same protection is extended to all your servers?

• A.Create IOCs of the malicious files you have found to prevent their execution.
• B.Enable Behavioral Threat Protection (BTP) with cytool to prevent the attack from spreading.
• C.Enable DLL Protection on all servers but there might be some false positives.
• D.Create Behavioral Threat Protection (BTP) rules to recognize and prevent the activity.