What are two purposes of "Respond to Malicious Causality Chains" in a Cortex XDR Windows Malware profile? (Choose two.)

The correct answer is B. Automatically kill the processes involved in malicious activity. D. Automatically block the IP addresses involved in malicious traffic. The "Respond to Malicious Causality Chains" feature in a Cortex XDR Windows Malware profile allows the agent to take automatic actions against network connections and processes that are involved in malicious activity on the endpoint. The feature has two modes: Block IP Address…

Prevention and Response

Question

Options

AAutomatically close the connections involved in malicious traffic.
BAutomatically kill the processes involved in malicious activity.
CAutomatically terminate the threads involved in malicious activity.
DAutomatically block the IP addresses involved in malicious traffic.

How the community answered

(54 responses)

A
11% (6)
B
81% (44)
C
7% (4)

Explanation

The "Respond to Malicious Causality Chains" feature in a Cortex XDR Windows Malware profile allows the agent to take automatic actions against network connections and processes that are involved in malicious activity on the endpoint. The feature has two modes: Block IP Address and The two purposes of "Respond to Malicious Causality Chains" in a Cortex XDR Windows Malware profile are: Automatically kill the processes involved in malicious activity. This can help to stop the malware from spreading or doing any further damage. Automatically block the IP addresses involved in malicious traffic. This can help to prevent the malware from communicating with its command and control server or other malicious hosts.

Topics

#malware profile#causality chains#process termination#malicious activity response

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice