XDR-ANALYST · Question #47
Which of the following paths will successfully activate Remediation Suggestions?
The correct answer is B. Causality View > Actions > Remediation Suggestions. Remediation Suggestions is a feature of Cortex XDR that provides you with recommended actions to remediate the root cause and impact of an incident. Remediation Suggestions are based on the analysis of the causality chain, the behavior of the malicious files or processes, and…
Question
Which of the following paths will successfully activate Remediation Suggestions?
Options
- AIncident View > Actions > Remediation Suggestions
- BCausality View > Actions > Remediation Suggestions
- CAlerts Table > Right-click on a process node > Remediation Suggestions
- DAlerts Table > Right-click on an alert > Remediation Suggestions
How the community answered
(29 responses)- A10% (3)
- B72% (21)
- C14% (4)
- D3% (1)
Explanation
Remediation Suggestions is a feature of Cortex XDR that provides you with recommended actions to remediate the root cause and impact of an incident. Remediation Suggestions are based on the analysis of the causality chain, the behavior of the malicious files or processes, and the best practices for incident response. Remediation Suggestions can help you to quickly and effectively contain and resolve an incident, as well as prevent future recurrence. To activate Remediation Suggestions, you need to follow these steps: In the Cortex XDR management console, go to Incidents and select an incident that you want to Click Causality View to see the graphical representation of the causality chain of the incident. Click Actions and select Remediation Suggestions. This will open a new window that shows the suggested actions for each node in the causality chain. Review the suggested actions and select the ones that you want to apply. You can also edit or delete the suggested actions, or add your own custom actions. Click Apply to execute the selected actions on the affected endpoints. You can also schedule the actions to run at a later time or date.
Topics
Community Discussion
No community discussion yet for this question.