Palo_Alto_Networks
XDR-ANALYST · Question #61
XDR-ANALYST Question #61: Real Exam Question with Answer & Explanation
The correct answer is C. To store and reuse tested XQL queries. The Query Library allows users to save, organize, and reuse validated XQL queries, improving efficiency and consistency in threat hunting and analysis.
Question
What is the main benefit of using the Query Library in Cortex XDR?
Options
- ATo configure endpoint agents for detection
- BTo run packet capture automatically
- CTo store and reuse tested XQL queries
- DTo configure BIOS-level policy changes
Explanation
The Query Library allows users to save, organize, and reuse validated XQL queries, improving efficiency and consistency in threat hunting and analysis.
Community Discussion
No community discussion yet for this question.