Which native automation can be triggered from within a playbook or incident in Cortex XSIAM?
Response:

During an ongoing investigation, a user reports a suspected file on their machine. What actions can the analyst take using XSIAM?
(Choose two)
Response:

Match the Playground function to its use case:
Function
A) Script testing
B) Playbook preview
C) Output debugging
D) Environment clone
Use Case
1. Validate automation scripts without impact
2. Simulate task flow before deployment
3. View logs and errors for test executions
4. Create safe replicas for validation
Response:

While reviewing a dataset's schema, you notice fields for event_type, src_ip, and dest_port. What does this allow you to do in XQL?
(Choose two)
Response:

What happens when an endpoint is isolated in Cortex XSIAM?
Response: