Which two steps belong in the Cortex XSOAR incident lifecycle? (Choose two.)

Which predefined dashboard will provide information regarding the status of deployed endpoints?

What is a key benefit of data protection?

Which action should an administrator take to create automated response actions when a user account is compromised, allowing attacker to upload data to an external IP address and infect a machine on the company network with malware?

A customer is investigating a security incident in which unusual network traffic is observed and a malicious process is identified on an endpoint. Which Cortex XDR capability assists with correlating firewall network logs and endpoint data in this environment?