Question 1

Which of the following represents a common sequence of cyber-attack tactics?

Options :

A : Actions on the objective Â» Reconnaissance Â» Weaponization & Delivery Â» Exploitation Â»Installation Â» Command & Control

B : Installation >> Reconnaissance Â» Weaponization & Delivery Â» Exploitation Â» Command & Control Â»Actions on the objective

C : Reconnaissance Â» Weaponization & Delivery Â» Exploitation Â» Installation Â» Command & Control Â»Actions on the objective

D : Reconnaissance >> Installation Â» Weaponization & Delivery Â» Exploitation Â» Command & Control Â»Actions on the objective

Answer: C

Question 2

As a Malware Analyst working with Cortex XDR you notice an alert suggesting that there was aprevented attempt to download Cobalt Strike on one of your servers. Days later, you learn about amassive ongoing supply chain attack. Using Cortex XDR you recognize that your server wascompromised by the attack and that Cortex XDR prevented it. What steps can you take to ensure thatthe same protection is extended to all your servers?

Options :

A : Create Behavioral Threat Protection (BTP) rules to recognize and prevent the activity.

B : Enable DLL Protection on all servers but there might be some false positives.

C : Create IOCs of the malicious files you have found to prevent their execution.

D : Enable Behavioral Threat Protection (BTP) with cytool to prevent the attack from spreading.

Answer: A

Question 3

Which license is required when deploying Cortex XDR agent on Kubernetes Clusters as a DaemonSet?

Options :

A : Cortex XDR Pro per TB

B : Host Insights

C : Cortex XDR Pro per Endpoint

D : Cortex XDR Cloud per Host

Answer: D

Question 4

To create a BIOC rule with XQL query you must at a minimum filter on which field in order for it to be a valid BIOC rule?

Options :

A : causality_chain

B : endpoint_name

C : threat_event

D : event_type

Answer: D

Question 5

Where can SHA256 hash values be used in Cortex XDR Malware Protection Profiles?

Options :

A : in the macOS Malware Protection Profile to indicate allowed signers

B : in the Linux Malware Protection Profile to indicate allowed Java libraries

C : SHA256 hashes cannot be used in Cortex XDR Malware Protection Profiles

D : in the Windows Malware Protection Profile to indicate allowed executables

Answer: D

Confidently Practice Online with Free XDR-Analyst Exam Cram

Buying Options: