Which of the following is not a valid indicator type in Cortex XSIAM?
Response:

Match each XDM type with the type of data it organizes:
XDM Type
A) xdm.network_traffic
B) xdm.endpoint_alert
C) xdm.process
D) xdm.file_event
Data Organized
1. Communication details between hosts
2. Alert data from XDR agent or third-party systems
3. Executed process and command-line activity
4. File read/write, access, and creation actions
Response:

You're reviewing suspicious IPs imported from VirusTotal. Which two XSIAM actions are valid next steps?
Response:

An alert fires indicating lateral movement between endpoints. It was triggered after evaluating multiple unrelated activities, such as credential access and abnormal port scanning. What are likely characteristics of this alert?
(Choose two)
Response:

Which action can be performed through custom prioritization logic?
Response: