XDR Features #4

In Cortex, which domain focuses on activities such as monitoring network traffic and conducting vulnerability assessments?

• Security
• IT
• Hunting
• Compliance

In Cortex, which domain focuses on activities such as detecting, preventing, and blocking threats?

• Security
• IT
• Hunting
• Compliance

Which three characteristics are built-in elements of data model rules?

• Raw data
• Structure
• Occurrence
• Compatibility
• Redundancy

Which XSIAM feature provides pre-built bundles of integrations, playbooks, automations and fields, and all the dependencies needed to support specific security orchestration use cases?

• Correlation Rules
• WildFire
• Marketplace
• Add-on Library

Which of the following acts as a normalization layer to apply the Unified Data Model schema?

• XQL
• Correlation rules
• XDM
• Hot storage

What does the phrase “Parsing is forever” mean in Cortex?

• Parsing saves data longer than data models.
• Parsing is the best option for organizing data.
• Parsing makes changes that can’t be reversed.
• Parsing is compute intensive and should be avoided.

Which term best describes the systematic approach to decomposing tables in order to eliminate data redundancy?

• Parsing
• Filtering
• Modeling
• Normalization

What is a key difference between Broker VM and Engines?

• Broker VM handles only API integrations
• Broker VM is only for data collection
• Broker VM is more complex than engines
• Broker VM is does not support clustering

What are two modules Cortex can access to get additional data?

• HTTP Collector
• ASM
• Kafka
• TI

What are pre-built bundles of integrations, playbooks and automations that are available from Marketplace?

• Engines
• Content Packs
• Agents
• Integrations