What is the expected behavior when an endpoint is isolated in Cortex XSIAM?

The correct answer is C. It will not have network access except for traffic to Cortex XSIAM.. When an endpoint is isolated in Cortex XSIAM, it loses general network access but can still communicate with Cortex XSIAM to allow monitoring and remediation.

Endpoint Security and Response

Question

Options

AIt can continue to communicate with other endpoints.
BIt can continue to receive regular upgrades in Cortex XSIAM.
CIt will not have network access except for traffic to Cortex XSIAM.
DIt will have access to only internal network resources.

How the community answered

(32 responses)

A
3% (1)
B
3% (1)
C
84% (27)
D
9% (3)

Explanation

When an endpoint is isolated in Cortex XSIAM, it loses general network access but can still communicate with Cortex XSIAM to allow monitoring and remediation.

Topics

#endpoint isolation#Cortex XSIAM#network access control#containment

Community Discussion

No community discussion yet for this question.

Full SECOPS-PRO Practice