Question 1

Which of the following best describes the role of Cortex XDR during an active ransomware attack on an organization’s endpoints?

Options :

A : Cortex XDR deploys endpoint firewall rules to block all external traffic during the attack.

B : Cortex XDR automatically reverts the infected system to its previous state through rollback mechanisms.

C : Cortex XDR identifies unusual encryption patterns and correlates them with network activity to halt the attack.

D : Cortex XDR relies on traditional antivirus capabilities to quarantine the ransomware file.

Answer: C

Question 2

Which of the following characteristics best describes a Peer-to-Peer (P2P) botnet?

Options :

A : Relies on a central server to distribute commands to infected devices.

B : Uses encrypted blockchain transactions to send commands to bots.

C : Focuses exclusively on launching phishing attacks.

D : Each bot communicates with other bots in a decentralized manner.

Answer: D

Question 3

Which capability is most commonly associated with DNS Security technologies?

Options :

A : Automatically updating IP address mappings in DNS records.

B : Providing redundant DNS server functionality to improve uptime.

C : Encrypting all DNS traffic with the TLS protocol by default.

D : Detecting and blocking domain generation algorithm (DGA)-based malware communications.

Answer: D

Question 4

Your organization uses a Cloud Native Security Platform (CNSP) to ensure compliance with regulatory standards. Which capability is most critical for automating compliance in a multi-cloud environment?

Options :

A : Real-time compliance reporting integrated with cloud-native tools like AWS Config and Azure Policy

B : Manual tagging of compliant and non-compliant resources

C : Focusing on securing only production workloads while ignoring development environments

D : Setting up individual compliance scripts for each cloud environment

Answer: A

Question 5

Which of the following methods is most effective for detecting a command-and-control (C2) communication channel in a compromised network?

Options :

A : Using endpoint detection tools to identify unauthorized USB device connections.

B : Scanning email attachments for known malware signatures.

C : Blocking all internet access from the internal network to prevent potential C2 channels.

D : Monitoring network traffic for abnormal outbound connections to uncommon or suspicious domains.

Answer: D

Confidently Practice Online with Free Cybersecurity-Practitioner Exam Cram

Buying Options: