Which module provides the best visibility to view vulnerabilities?

The correct answer is C. Host Insights. Host Insights is the Cortex XDR module specifically designed to provide deep visibility into endpoint state, including installed software, running processes, and-critically-known vulnerabilities present on each host. It correlates endpoint data with vulnerability intelligence to

Submitted by renata2k· Apr 18, 2026Investigation and Response

Question

Options

ADevice Control Violations
BVulnerability Management
CHost Insights
DForensics Insights

How the community answered

(40 responses)

A
8% (3)
B
3% (1)
C
88% (35)
D
3% (1)

Explanation

Host Insights is the Cortex XDR module specifically designed to provide deep visibility into endpoint state, including installed software, running processes, and-critically-known vulnerabilities present on each host. It correlates endpoint data with vulnerability intelligence to surface CVEs and risk scores. Device Control Violations (A) is focused on removable media and peripheral policy enforcement. The Vulnerability Management label (B) may appear in other Palo Alto products but in the context of Cortex XDR, Host Insights is the primary module for vulnerability visibility. Forensics Insights (D) is used for post-incident investigation and artifact collection, not proactive vulnerability discovery.

Topics

#Cortex XDR modules#Host Insights#Vulnerability visibility#Endpoint security posture

Community Discussion

No community discussion yet for this question.

Full PCDRA Practice