Palo_Alto_Networks
XSIAM-ANALYST · Question #21
In the Endpoint Data context menu of the Cortex XSIAM endpoints table, where will an analyst be able to determine which users accessed an endpoint via Live Terminal?
The correct answer is B. View Actions. Live Terminal sessions are recorded as response actions on the endpoint, and the View Actions pane lists who executed each action, letting you see which users accessed the host.
Endpoint Management and Response
Question
In the Endpoint Data context menu of the Cortex XSIAM endpoints table, where will an analyst be able to determine which users accessed an endpoint via Live Terminal?
Options
- AView Incidents
- BView Actions
- CView Endpoint Policy
- DView Endpoint Logs
How the community answered
(70 responses)- A7% (5)
- B87% (61)
- C4% (3)
- D1% (1)
Explanation
Live Terminal sessions are recorded as response actions on the endpoint, and the View Actions pane lists who executed each action, letting you see which users accessed the host.
Topics
#Live Terminal#Endpoint Actions#Cortex XSIAM UI#Endpoint Management
Community Discussion
No community discussion yet for this question.