Palo_Alto_Networks
PSE-CORTEX · Question #7
An Administrator is alerted to a Suspicious Process Creation security event from multiple users. The users believe that these events are false positives Which two steps should the administrator take…
The correct answer is B. Within the Malware Security profile add the specific parent process, child process, and command C. In the Cortex XDR security event, review the specific parent process, child process, and. See the full explanation below for the reasoning.
Question
An Administrator is alerted to a Suspicious Process Creation security event from multiple users. The users believe that these events are false positives Which two steps should the administrator take to confirm the false positives and create an exception? (Choose two )
Options
- AWith the Malware Security profile, disable the "Prevent Malicious Child Process Execution"
- BWithin the Malware Security profile add the specific parent process, child process, and command
- CIn the Cortex XDR security event, review the specific parent process, child process, and
- DContact support and ask for a security exception.
How the community answered
(30 responses)- A17% (5)
- B77% (23)
- D7% (2)
Community Discussion
No community discussion yet for this question.