PSE-Cortex Practice Test

Rearrange the steps into the correct order for modifying an incident layout. 

If an anomalous process is discovered while investigating the cause of a security event, you can take
immediate action to terminate the process or the whole process tree, and block processes from running by initiating which Cortex XDR capability?

A.

Live Sensors

B.

File Explorer

C.

Log Stitching

D.

Live Terminal

Which Cortex XDR Agent capability prevents loading malicious files from USB-connected removable
equipment?

A.

Agent Configuration

B.

Device Control

C.

Device Customization

D.

Agent Management

Which deployment type supports installation of an engine on Windows, Mac OS. and Linux?

A.

RPM

B.

SH

C.

DEB

D.

ZIP

Whichfour types of Traps logs are stored within Cortex Data Lake?

A.

Threat, Config, System,Data

B.

Threat, Config, System, Analytic

C.

Threat, Monitor. System, Analytic

D.

Threat, Config, Authentication, Analytic