What are two reasons incident investigation is needed in Cortex XDR? (Choose two.)

The correct answer is B. Insider Threats may not be blocked and initial activity may go undetected. C. Analysts need to acquire forensic artifacts of malware that has been blocked by the XDR agent. See the full explanation below for the reasoning.

Question

Options

ANo solution will stop every attack requiring further investigation of activity.
BInsider Threats may not be blocked and initial activity may go undetected.
CAnalysts need to acquire forensic artifacts of malware that has been blocked by the XDR agent.
DDetailed reports are needed for senior management to justify the cost of XDR.

How the community answered

(29 responses)

A
10% (3)
B
69% (20)
D
21% (6)

Community Discussion

No community discussion yet for this question.

Full PSE-CORTEX Practice