PSE-Cortex Free Practice Test

Cortex XDR can schedule recurring scans of endpoints for malware. Identify two methods for initiating an on-demand malware scan (Choose two )

1. A. Response > Action Center
2. B. the local console
3. C. Telnet
4. D. Endpoint > Endpoint Management

Correct Answer: AD

Rearrange the steps into the correct order for modifying an incident layout.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

What is the difference between an exception and an exclusion?

1. A. An exception is based on rules and exclusions are on alerts
2. B. An exclusion is based on rules and exceptions are based on alerts.
3. C. An exception does not exist
4. D. An exclusion does not exist

Correct Answer: A

An EDR project was initiated by a CISO. Which resource will likely have the most heavy influence on the project?

1. A. desktop engineer
2. B. SOC manager
3. C. SOC analyst IT
4. D. operations manager

Correct Answer: B

What are two manual actions allowed on War Room entries? (Choose two.)

1. A. Mark as artifact
2. B. Mark as scheduled entry
3. C. Mark as note
4. D. Mark as evidence

Correct Answer: CD