PCDRA · Question #77
The Action Center can be found on which tab?
The correct answer is C. Response. The Action Center, where security analysts manage and review actions taken on endpoints, is located under the Response tab within the Cortex XDR console.
Question
The Action Center can be found on which tab?
Options
- AReporting
- BInvestigation
- CResponse
- DEndpoints
How the community answered
(25 responses)- A4% (1)
- B8% (2)
- C88% (22)
Why each option
The Action Center, where security analysts manage and review actions taken on endpoints, is located under the Response tab within the Cortex XDR console.
The Reporting tab is primarily for generating and viewing reports and dashboards, not for managing response actions.
The Investigation tab is used for analyzing incidents and alerts, including using tools like XQL, but the Action Center specifically deals with the actions taken rather than the investigative process itself.
In Cortex XDR, the 'Response' tab is dedicated to managing and responding to threats, and within this tab, the 'Action Center' (or a similarly named section like 'Action History' or 'Response Actions') provides a centralized view of all actions initiated by the security team on endpoints, such as isolating hosts or initiating scans.
The Endpoints tab provides an overview and management of connected agents, but the Action Center focuses on the actions performed on those endpoints.
Concept tested: Cortex XDR console navigation (Action Center)
Source: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Action-Center
Topics
Community Discussion
No community discussion yet for this question.