SecOps-Pro

SecOps-Pro practice questions, page 2 of 3, with answer review and explanations.

Question 6

What is a difference between cold storage and hot storage in Cortex?

  1. Cold storage is required, while hot storage is optional.
  2. Cold storage and hot storage can be stored in different cloud locations.
  3. Logs in cold storage have more details than logs stored in hot storage.
  4. Querying logs in cold storage takes more time than querying logs in hot storage.

Question 7

Where in Cortex XSOAR are analystsle to collaborate and converse with others for joint real-time investigations?

  1. Investigations tab
  2. War Room
  3. Evidence Board
  4. Work plan

Question 8

Which Cortex XDR component raises an alert when suspicious activity composed of multiple events is detected and deviates from established baseline behavior?

  1. Analytics Engine
  2. Causality Analysis Engine
  3. XQL Query Engine
  4. Cloud Identity Engine

Question 9

Which two types of content can be installed or upgraded through a Cortex XSIAM content pack? (Choose two.)

  1. Analytics alerts
  2. Playbook triggers
  3. Data Model rules
  4. Behavioral Threat Protection (BTP)

Question 10

What is required to enable ingestion of on-premises firewall logs into Cortex XDR?

  1. Broker VM
  2. API
  3. PAN-OS content pack
  4. Cloud Identity Engine