SecOps-Pro

SecOps-Pro practice questions, page 3 of 3, with answer review and explanations.

Question 11

Which component of Cortex XDR is designed to detect insider threats?

  1. Forensics
  2. Identity Analytics
  3. Cloud Identity Engine
  4. Host Insights

Question 12

A new incident in Cortex XSIAM contains WildFire malware and Behavioral Threat Protection (BTP) alertsout an unsigned process attempting to dump the memory of Isass.exe. Which initial verdict applies to this incident?

  1. False positive
  2. True positive
  3. False negative
  4. True negative