SecOps-Pro sample questions

Question 1

An organization is subject to strict GDPR regulations requiring that personal data in security logs be retained for exactly 90 days and then securely purged. The security architect is configuring Cortex Data Lake to support Cortex XDR. How should the log retention be managed to ensure compliance?

Accepted Answer

Configure the retention policy within the Cortex Data Lake settings to specify a retention period of 90 days for the relevant log types.

Answer

Configure a Log Forwarding profile to send logs to an external SIEM and set the retention within Cortex XDR to 'Unlimited'.

Answer

Purchase a Cortex Data Lake storage quota that matches the estimated 90-day volume and rely on the automatic overwrite of oldest data.

Answer

Use the Cortex XDR API to run a daily script that deletes incidents older than 90 days.

Question 2

A CISO requests a high-level weekly report that summarizes the organization's security posture, focusing on the Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) metrics, along with a breakdown of incidents by severity. Which feature in Cortex XDR is BEST suited to automate this requirement?

Accepted Answer

Create a custom Dashboard with widgets for MTTD/MTTR and Incident Severity, then use the 'Schedule Report' feature to email it weekly.

Answer

Configure a correlation rule to trigger an alert every time MTTD exceeds a threshold.

Answer

Use the Incident Management view to filter by date and manually export the table to CSV every week.

Answer

Use the 'Investigation' tab to run an XQL query for all incidents and email the query syntax to the CISO.

Question 3

In the context of Cortex XDR and XSIAM, which statement accurately distinguishes between Artificial Intelligence (AI) and Machine Learning (ML)?

Accepted Answer

ML is a subset of AI that involves systems learning from data to identify patterns (like behavioral anomalies) without explicit programming, while AI is the broader science of mimicking human intelligence.

Answer

Cortex XDR uses AI for log stitching and ML for static file analysis only.

Answer

AI refers to the specific algorithms used to detect malware signatures, while ML refers to the broader concept of automated playbooks.

Answer

AI requires human intervention to tag data sets, whereas ML operates completely autonomously without any training data.

Question 4

A security analyst is investigating a potential data exfiltration incident. They need to visualize the sequence of network connections and process executions to determine if the 'svchost.exe' process spawned a suspicious PowerShell script. Which Cortex XDR feature provides this specific visualization?

Accepted Answer

Causality View

Answer

Live Terminal

Answer

Incident Star View

Answer

Log Stitching Timeline

Question 5

Select TWO key components that are typically integrated into a modern Security Operations Center (SOC) architecture to enhance automation and visibility.

Accepted Answer

Security Information and Event Management (SIEM)

Accepted Answer

Security Orchestration, Automation, and Response (SOAR)

Answer

Enterprise Resource Planning (ERP)

Answer

Customer Relationship Management (CRM)

Question 6

True or False: Cortex XDR automatically masks sensitive data fields (such as credit card numbers) in logs at the time of ingestion into the Data Lake without any additional configuration.

Accepted Answer

False

Answer

True

Free SecOps-Pro sample questions

An organization is subject to strict GDPR regulations requiring that personal data in security logs be retained for exactly 90 days and then securely purged. The security architect is configuring Cortex Data Lake to support Cortex XDR. How should the log retention be managed to ensure compliance?

In the context of Cortex XDR and XSIAM, which statement accurately distinguishes between Artificial Intelligence (AI) and Machine Learning (ML)?

Select TWO key components that are typically integrated into a modern Security Operations Center (SOC) architecture to enhance automation and visibility.

True or False: Cortex XDR automatically masks sensitive data fields (such as credit card numbers) in logs at the time of ingestion into the Data Lake without any additional configuration.

6 more free samples are waiting