XSIAM-Analyst Practice Test

XSIAM-Analyst Practice Test practice questions, page 3 of 3, with answer review and explanations.

Question 11

Which Cytool command will re-enable protection on an endpoint that has Cortex XDR agent protection paused?

  1. cytool security enable
  2. cytool service start
  3. cytool runtime start
  4. cytool protect enable

Question 12

A Cortex XSIAM analyst is reading a blog that references an unfamiliar critical zero-day vulnerability. This vulnerability has been weaponized, and there is evidence that it is being exploited by threat actors targeting a customer's industry. Where can the analyst go within Cortex XSIAM to learn more about this vulnerability and any potential impacts on the customer environment?

  1. Threat Intel Management --> Sample Analysis
  2. Attack Surface --> Threat Response Center
  3. Attack Surface --> Attack Surface Rules
  4. Threat Intel Management --> Indicator