Which statement is correct based on the report output below?

The correct answer is C. Forensic inventory data collection is enabled. The report output shows the number of endpoints that have forensic inventory data collection enabled, which is a feature of Cortex XDR that allows the collection of detailed information about the endpoint's hardware, software, and network configuration. This feature helps…

Cortex XDR Reporting and Monitoring

Question

Exhibit

Options

AHost Inventory Data Collection is enabled.
B3,297 total incidents have been detected.
CForensic inventory data collection is enabled.
D133 agents have full disk encryption.

How the community answered

(22 responses)

A
5% (1)
B
14% (3)
C
77% (17)
D
5% (1)

Explanation

The report output shows the number of endpoints that have forensic inventory data collection enabled, which is a feature of Cortex XDR that allows the collection of detailed information about the endpoint's hardware, software, and network configuration. This feature helps analysts to investigate and respond to incidents more effectively by providing a comprehensive view of the endpoint's state and activity. Forensic inventory data collection can be enabled or disabled per policy in Cortex XDR.

Topics

#report interpretation#forensic inventory#host inventory#disk encryption

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice