Which Cortex Cloud feature best supports forensic investigations after a security breach?

The correct answer is A. Log retention and search. Long-term log retention and advanced search capabilities allow analysts to reconstruct events, trace attacker actions, and determine the breach's root cause.

Incident Response and Forensics

Question

Options

ALog retention and search
BURL block list
CUser password policy
DPrinter activity logs

How the community answered

(18 responses)

A
72% (13)
B
6% (1)
C
6% (1)
D
17% (3)

Explanation

Long-term log retention and advanced search capabilities allow analysts to reconstruct events, trace attacker actions, and determine the breach's root cause.

Topics

#forensic investigation#log retention#log search#incident response

Community Discussion

No community discussion yet for this question.

Full CLOUDSEC-PRO Practice