You observe that a CVE is impacting multiple assets. How can you use ASM to investigate further?
(Choose two)
Response:

Match each investigation objective with the most appropriate XDM datas
Objective
A) Investigate DNS abuse
B) Review endpoint alert activity
C) Analyze malware process spawning
D) Investigate suspicious file writes
Dataset
1. xdm.dns_query
2. xdm.endpoint_alert
3. xdm.process
4. xdm.file_event
Response:

What happens when an endpoint is isolated in Cortex XSIAM?
Response:

Which of the following best defines a Cortex Data Model (XDM)?
Response:

An analyst uses the Playground to validate playbook execution. What outcomes indicate a successful test?
(Choose two)
Response: