Which solution informs a customer concerned about zero-day targeted attacks whether an attack is specifically targeted at its property?

Question

Options

• AAutoFocus
• BPanorama Correlation Report
• CCortex XSOAR Community edition
• DCortex XDR Prevent

• A
  76% (29)
• B
  5% (2)
• C
  5% (2)
• D
  13% (5)

Explanation

AutoFocus is a Palo Alto Networks threat intelligence service that provides context around attacks, specifically identifying whether malware or threats are part of a targeted campaign against your organization or industry. Its threat correlation and tagging system lets you see if indicators (IPs, domains, malware hashes) are uniquely linked to attacks on your specific environment - making it the right tool for answering "is this attack targeted at us?"

Why the distractors are wrong:

• B. Panorama Correlation Report - Panorama is a centralized management and reporting platform; its correlation reports surface internal network anomalies but don't provide external threat intelligence about who is being targeted.
• C. Cortex XSOAR Community Edition - XSOAR is a SOAR (Security Orchestration, Automation, and Response) platform focused on playbook-driven incident response, not threat intelligence attribution.
• D. Cortex XDR Prevent - XDR Prevent is an endpoint protection product (AV/EDR replacement); it blocks threats at the endpoint but doesn't tell you whether an attack is specifically targeting your organization.

Memory tip: Think of AutoFocus like a fingerprint database for threats - it lets you check whether a threat's "fingerprint" appears exclusively in attacks against your sector or company, answering the key question of targeted vs. opportunistic. If the exam mentions "targeted," "attribution," or "is this aimed at us," think AutoFocus.

No community discussion yet for this question.