Palo_Alto_Networks
SECOPS-PRO · Question #58
Which Cortex XDR component raises an alert when suspicious activity composed of multiple events is detected and deviates from established baseline behavior?
The correct answer is A. Analytics Engine. The Analytics Engine in Cortex XDR generates alerts when correlated events deviate from baseline behavior, detecting suspicious multi-event activity.
Threat Detection and Analytics
Question
Which Cortex XDR component raises an alert when suspicious activity composed of multiple events is detected and deviates from established baseline behavior?
Options
- AAnalytics Engine
- BCausality Analysis Engine
- CXQL Query Engine
- DCloud Identity Engine
How the community answered
(34 responses)- A76% (26)
- B15% (5)
- C6% (2)
- D3% (1)
Explanation
The Analytics Engine in Cortex XDR generates alerts when correlated events deviate from baseline behavior, detecting suspicious multi-event activity.
Topics
#Cortex XDR#Analytics Engine#behavioral baseline#anomaly detection
Community Discussion
No community discussion yet for this question.