XDR-Analyst 無料問題集「Palo Alto Networks XDR Analyst」

（A）No, a separate installer package without Live Terminal is required.

（B）No, it is a required feature of the agent.

（C）Yes, via Agent Settings Profile.

（D）Yes, via the Cortex XDR console or with an installation switch.

（A）Using the Open Card and Open Timeline actions respectively

（B）You can't pivot within a row to Causality view and Timeline views

（C）Using the Open Card Only

（D）Using Open Timeline Actions Only

（A）No, a separate installer package without Live Terminal is required.

（B）No, it is a required feature of the agent.

（C）Yes, via Agent Settings Profile.

（D）Yes, via the Cortex XDR console or with an installation switch.

（A）Only alerts with the same host are grouped together into one Incident in a given time frame.

（B）Every alert creates a new Incident.

（C）Alerts with same causality chains that occur within a given time frame are grouped together into an Incident.

（D）Alerts that occur within a three-hour time frame are grouped together into one Incident.

（A）on the HUB page at apps.paloaltonetworks.com

（B）next to relevant Key Artifacts in the incidents details page

（C）under the gear icon --> Agent Audit Logs

（D）under Response --> Action Center

（A）Support exception

（B）Process exception

（C）Behavioral threat protection rule exception

（D）Local file threat examination exception

（A）Pending

（B）It is blank

（C）New

（D）Unassigned

（A）Device Control Violations module

（B）Forensics module

（C）Live Terminal module

（D）Host Insights module

（A）BTP uses machine Learning to recognize malicious activity even if it is not known.

（B）BTP matches EDR data with rules provided by Cortex XDR.

（C）BTP injects into known vulnerable processes to detect malicious activity.

（D）BTP runs on the Cortex XDR and distributes behavioral signatures to all agents.

（A）Create a custom report and filter on starred incidents

（B）Click the star in the widget

（C）This is not currently supported

（D）Create a custom XQL widget