XSIAM-Analyst 試験問題を無料オンラインアクセス

In addition to defining the Rule Name and Severity Level, which step or set of steps accurately reflects how an analyst should configure an indicator prevention rule before reviewing and saving it?

• A.Select profiles for prevention.
  Filter and select one or more file, IP address, and domain indicators.
• B.Filter and select indicators of any type.
• C.Select profiles for prevention.
  Filter and select one or more SHA256 and MD5 indicators.
• D.Filter and select file, IP address, and domain indicators.

What information does a section header within a playbook task allow an analyst to see?

• A.Playbook owner
• B.Script being used
• C.Timer setting
• D.Integration availability

A Cortex XSIAM analyst is reading a blog that references an unfamiliar critical zero-day vulnerability. This vulnerability has been weaponized, and there is evidence that it is being exploited by threat actors targeting a customer's industry.
Where can the analyst go within Cortex XSIAM to learn more about this vulnerability and any potential impacts on the customer environment?

• A.Threat Intel Management --> Sample Analysis
• B.Attack Surface --> Threat Response Center
• C.Attack Surface --> Attack Surface Rules
• D.Threat Intel Management --> Indicator

Which type of task can be used to create a decision tree in a playbook?

• A.Sub-playbook
• B.Standard
• C.Job
• D.Conditional

Which two statements apply to IOC rules? (Choose two.)

• A.They can have an expiration date of up to 180 days.
• B.They can be used to detect a specific registry key.
• C.They can be uploaded using REST API.
• D.They can be excluded using suppression rules but not alert exclusions.