6.6 Explain the Features and Functionality of Cortex Solutions CYBERSECURITY-PRACTITIONER Practice Questions (Page 7)

Questions 31–34

1. 31application · medium

   A security team wants to automate the initial triage of incidents: when a new incident is created, it should automatically gather context from multiple tools, enrich indicators, and then assign a severity based on the results. Which XSOAR feature should they use to define this automated workflow?

   • AA dashboard that displays incident metrics
   • BA threat intelligence feed connector
   • CA war room for collaboration
   • DA playbook that contains a series of automated tasks and conditional logic
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A threat hunter needs to investigate a potential compromise that may have occurred over the past six months. The data is stored in Cortex XSIAM, but the hunter is unsure of the exact indicators to search for. They want to explore the data visually and identify anomalies. Which approach should they take?

   • ACreate a playbook to automatically search for known indicators of compromise
   • BUse Cortex Data Lake to manually review raw logs
   • CDeploy Cortex Xpanse to discover external assets related to the compromise
   • DUse XSIAM's advanced search and visualization to explore historical data and look for patterns
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security team has discovered several internet-facing assets with known vulnerabilities. They need to determine which of these assets pose the highest risk to the organization and should be remediated first. Which Cortex Xpanse capability should they use to prioritize?

   • AData normalization to standardize asset records
   • BPlaybook automation to patch vulnerabilities
   • CRisk assessment and prioritization based on asset criticality and exploitability
   • DAttack surface discovery to find more assets
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   How does Cortex Xpanse discover an organization's internet-facing assets?

   • ABy installing agents on all internal servers
   • BBy continuously scanning the internet and correlating data with known organizational information
   • CBy requiring manual submission of asset lists
   • DBy analyzing firewall logs only
   Reveal Solution Discussion Select an answer first