nerdexam
Palo_Alto_Networks

PSE-CORTEX · Question #158

When initiated, which Cortex XDR capability allows immediate termination of the process-or entire process tree-on an anomalous process discovered during investigation of a security event?

The correct answer is B. Live terminal. See the full explanation below for the reasoning.

Question

When initiated, which Cortex XDR capability allows immediate termination of the process-or entire process tree-on an anomalous process discovered during investigation of a security event?

Options

  • ALive sensors
  • BLive terminal
  • CLog forwarding
  • DLog stitching

How the community answered

(49 responses)
  • A
    4% (2)
  • B
    73% (36)
  • C
    14% (7)
  • D
    8% (4)

Community Discussion

No community discussion yet for this question.

Full PSE-CORTEX Practice