nerdexam
Palo_Alto_Networks

XDR-ANALYST · Question #19

Live Terminal uses which type of protocol to communicate with the agent on the endpoint?

The correct answer is B. WebSocket. Live Terminal uses the WebSocket protocol to communicate with the agent on the endpoint. WebSocket is a full-duplex communication protocol that enables bidirectional data exchange between a client and a server over a single TCP connection. WebSocket is designed to be…

Endpoint Investigation

Question

Live Terminal uses which type of protocol to communicate with the agent on the endpoint?

Options

  • ANetBIOS over TCP
  • BWebSocket
  • CUDP and a random port
  • DTCP, over port 80

How the community answered

(52 responses)
  • A
    15% (8)
  • B
    71% (37)
  • C
    4% (2)
  • D
    10% (5)

Explanation

Live Terminal uses the WebSocket protocol to communicate with the agent on the endpoint. WebSocket is a full-duplex communication protocol that enables bidirectional data exchange between a client and a server over a single TCP connection. WebSocket is designed to be implemented in web browsers and web servers, but it can be used by any client or server application. WebSocket provides a persistent connection between the Cortex XDR console and the endpoint, allowing you to execute commands and receive responses in real time. Live Terminal uses port 443 for WebSocket communication, which is the same port used for HTTPS

Topics

#Live Terminal#WebSocket protocol#agent communication#remote access

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice