4.1 Demonstrate Understanding of Endpoint Prevention and Extension Profiles and Policies XDR-ANALYST Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which techniques are commonly used in zero-day protection to detect unknown threats?

   • AUser awareness training
   • BBehavioral analysis and machine learning
   • CNetwork firewall rules
   • DSignature matching and hash lookups
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is an example of an extension profile use case?

   • AConfiguring the endpoint's IP address
   • BSetting up a VPN connection
   • CAssigning user roles in the XDR console
   • DAdding a custom script to block specific applications
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a common technique used by exploit prevention to block attacks?

   • AEncrypting all files on the endpoint
   • BBlocking all network connections to external IPs
   • CMonitoring for suspicious process behavior and memory access patterns
   • DSignature-based detection of known malware files
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   If an endpoint matches multiple policies, which policy is enforced?

   • AThe first policy in the list that matches
   • BThe policy that was created most recently
   • CThe policy with the highest priority number
   • DAll matching policies are merged
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is a recommended method for testing a prevention policy before full deployment?

   • ADeleting all existing policies
   • BApplying it to a small group of endpoints first
   • CChanging the policy order randomly
   • DDisabling the endpoint agent
   Reveal Solution Discussion Select an answer first