先試後買

A. MTH pushes content updates to prevent against the zero-day exploits.

B. MTH runs queries and investigative actions and no further action is taken.

C. MTH researches for threats in the logs and reports to engineering.

D. MTH researches for threats in the tenant and generates a report with the findings.

A. Manually star an alert.

B. Create an Incident-starring configuration.

C. Create an alert-starring configuration.

D. Manually star an Incident.

A. No, it is a required feature of the agent.

B. No, a separate installer package without Live Terminal is required.

C. Yes, via the Cortex XDR console or with an installation switch.

D. Yes, via Agent Settings Profile.

A. Reconnaissance - Installation - Weaponization & Delivery -Exploitation - Command & Control - Actions on the objective

B. Reconnaissance - Weaponization & Delivery - Exploitation - Installation - Command & Control - Actions on the objective

C. Actions on the objective - Reconnaissance - Weaponization & Delivery - Exploitation - Installation - Command & Control

D. Installation - Reconnaissance - Weaponization & Delivery - Exploitation - Command & Control - Actions on the objective

A. Automatically close the connections involved in malicious traffic.

B. Automatically kill the processes involved in malicious activity.

C. Automatically block the IP addresses involved in malicious traffic.

D. Automatically terminate the threads involved in malicious activity.

A. Only alerts with the same host are grouped together into one Incident in a given time frame.

B. Alerts that occur within a three-hour time frame are grouped together into one Incident.

C. Every alert creates a new Incident.

D. Alerts with same causality chains that occur within a given time frame are grouped together into an Incident.

A. Source IP Address

B. Source port

C. Destination IP Address

D. Destination IP Address: Destination

A. BTP runs on the Cortex XDR and distributes behavioral signatures to all agents.

B. BTP uses machine Learning to recognize malicious activity even if it is not known.

C. BTP injects into known vulnerable processes to detect malicious activity.

D. BTP matches EDR data with rules provided by Cortex XDR.

A. a central system, available via the internet, for registering officially licensed versions of software to prove ownership

B. a hierarchical database that stores settings for the operating system and for applications

C. a system of files used by the operating system to commit memory that exceeds the available hardware resources. Also known as the "swap"

D. a ledger for maintaining accurate and up-to-date information on total disk usage and disk space remaining available to the operating system

A. 5,000

B. 15,000

C. 10,000

D. 20,000