PSE-Cortex

PSE-Cortex practice questions, page 4 of 5, with answer review and explanations.

Question 16

Which process in the causality chain does the Cortex XDR agent identify as triggering an event sequence?

  1. causality group owner
  2. chain's alert initiator
  3. adversary's remote process
  4. relevant shell

Question 17

Which two statements apply to widgets? (Choose two.)

  1. All widgets are customizable.
  2. Dashboards cannot be shared across an organization.
  3. A widget can have its own time range that is different from the rest of the dashboard.
  4. Some widgets cannot be changed.

Question 18

Which source provides data for Cortex XDR?

  1. VMware NSX
  2. Amazon Alexa rank indicator
  3. Cisco ACI
  4. Linux endpoints

Question 19

Which two manual actions are allowed on War Room entries? (Choose two.)

  1. mark as note
  2. mark as scheduled entry
  3. mark as evidence
  4. mark as artifact

Question 20

What does DBot use to score an indicator that has multiple reputation scores?

  1. most severe score
  2. undefined score
  3. average score
  4. least severe score