Palo_Alto_Networks
PSE-CORTEX · Question #105
A Cortex XDR Pro administrator is alerted to a suspicious process creation security event from multiple users who believe these events are false positives. Which two steps should be taken confirm…
The correct answer is C. Within the Malware Security profile, add the specific parent process, child process, and command D. In the Cortex XDR security event, review the specific parent process, child process, and. See the full explanation below for the reasoning.
Question
A Cortex XDR Pro administrator is alerted to a suspicious process creation security event from multiple users who believe these events are false positives. Which two steps should be taken confirm the false positives and create an exception? (Choose two.)
Options
- AWithin the Malware Security profile, disable the Prevent Malicious Child Process Execution
- BContact support and ask for a security exception.
- CWithin the Malware Security profile, add the specific parent process, child process, and command
- DIn the Cortex XDR security event, review the specific parent process, child process, and
How the community answered
(24 responses)- A13% (3)
- B4% (1)
- C83% (20)
Community Discussion
No community discussion yet for this question.