Practice · XDR Analyst

~/paloalto-xdr-analyst · paloalto-xdr-analyst_d1_81e0d3c43102 ▊

paloalto-xdr-analyst_d1_81e0d3c43102 domain/d1 · medium single

A SOC analyst wants to begin detecting attacks immediately after deploying Cortex XDR, without waiting to author custom detection logic. Which capability allows the team to start detecting attacks out of the box?

A 400+ pre-defined correlation rules shipped with the platform
B A single web-based console for policy management
C Live Terminal access to endpoints
D Host Restore for recovering damaged files

Unlock this exam to join the per-question discussion and vote on questions.

next question →