Palo_Alto_Networks
SECOPS-PRO · Question #33
Which two functions are allowed when stitching logs in Cortex XDR? (Choose two.)
The correct answer is B. Creating granular BIOC and correlation rules D. Running investigation queries based on combined network and endpoint events. Stitching logs in Cortex XDR allows creation of granular BIOC/correlation rules and running investigation queries combining network and endpoint events.
Cortex XDR Investigation and Response
Question
Which two functions are allowed when stitching logs in Cortex XDR? (Choose two.)
Options
- AProviding real-time threat prevention or remediation of threats
- BCreating granular BIOC and correlation rules
- CEnabling creation of custom scripts for remediation of security incidents
- DRunning investigation queries based on combined network and endpoint events
How the community answered
(69 responses)- A20% (14)
- B71% (49)
- C9% (6)
Explanation
Stitching logs in Cortex XDR allows creation of granular BIOC/correlation rules and running investigation queries combining network and endpoint events.
Topics
#Cortex XDR#log stitching#BIOC rules#investigation queries
Community Discussion
No community discussion yet for this question.