Online Access Free XSIAM-Analyst Exam Questions

Which type of analytics will trigger the alert on the image shown?

• A.Contextual
• B.Baseline
• C.Anomaly
• D.Behavioral

You're investigating a compromised device and want to perform remote forensics. Which live terminal options would be effective?
(Choose two)
Response:

• A.Enable USB ports
• B.Retrieve registry hives
• C.Deactivate local firewall
• D.Run endpoint file retrieval

An analyst is investigating suspicious lateral movement. Which two types of forensic evidence are most helpful?
Response:

• A.PowerShell command history
• B.Browser cache
• C.Font configuration files
• D.Remote login event logs

What forensic data is most useful for determining malware persistence on a host?
Response:

• A.DNS queries
• B.Parent process tree
• C.Network flows
• D.Auto-start registry entries

What is the primary function of hunting in Cortex XSIAM?
Response:

• A.Creating manual scoring policies
• B.Searching for indicators across datasets
• C.Uploading endpoint profiles
• D.Performing backups