XDR-ANALYST · Question #23
When investigating security events, which feature in Cortex XDR is useful for reverting the changes on the endpoint?
The correct answer is D. Remediation Suggestions. When investigating security events, the feature in Cortex XDR that is useful for reverting the changes on the endpoint is Remediation Suggestions. Remediation Suggestions are a feature of Cortex XDR that provide you with recommended actions to undo the effects of malicious…
Question
When investigating security events, which feature in Cortex XDR is useful for reverting the changes on the endpoint?
Options
- ARemediation Automation
- BMachine Remediation
- CAutomatic Remediation
- DRemediation Suggestions
How the community answered
(38 responses)- A3% (1)
- B13% (5)
- C11% (4)
- D74% (28)
Explanation
When investigating security events, the feature in Cortex XDR that is useful for reverting the changes on the endpoint is Remediation Suggestions. Remediation Suggestions are a feature of Cortex XDR that provide you with recommended actions to undo the effects of malicious activity on your endpoints. You can view the remediation suggestions for each alert or incident in the Cortex XDR console, and decide whether to apply them or not. Remediation Suggestions can help you restore the endpoint to its original state, remove malicious files or processes, or fix registry or system settings. Remediation Suggestions are based on the forensic data collected by the Cortex XDR agent and the analysis performed by Cortex XDR.
Topics
Community Discussion
No community discussion yet for this question.