26/5/202 Fichas de aprendizaje Palo Alto EDU-160: Cortex XDR |
1 Quizlet
Palo Alto EDU-160: Cortex XDR
Términos de la unidad (73)
Which entity can be identified D
as every immediate child
process (and thread) of a
spawner?
A. final instance
B.final spawner
C. causality instance
D. causality group owner
Which component is required in C
agentless Cortex XDR
deployments?
A. Directory Sync App
B. Panorama
C. PathFinder
D. Broker
Which tactic does Cortex A
XDR block by detecting
changes in connectivity
patterns such as
increased rates of connections,
failed connections, and port
scans?
A. discovery
B. exfiltration
C. lateral movement
D. command and control
Which entity is created based A
on the result of running a
query?
A. a table
B.an alert
C. an incident
D. a report in PDF
Palo Alto EDU-160: Cortex XDR
https://quizlet.com/513401990/palo-alto-edu-160-cortex-xdr- 1/
flash-cards/# 4
1 Quizlet
Palo Alto EDU-160: Cortex XDR
Términos de la unidad (73)
Which entity can be identified D
as every immediate child
process (and thread) of a
spawner?
A. final instance
B.final spawner
C. causality instance
D. causality group owner
Which component is required in C
agentless Cortex XDR
deployments?
A. Directory Sync App
B. Panorama
C. PathFinder
D. Broker
Which tactic does Cortex A
XDR block by detecting
changes in connectivity
patterns such as
increased rates of connections,
failed connections, and port
scans?
A. discovery
B. exfiltration
C. lateral movement
D. command and control
Which entity is created based A
on the result of running a
query?
A. a table
B.an alert
C. an incident
D. a report in PDF
Palo Alto EDU-160: Cortex XDR
https://quizlet.com/513401990/palo-alto-edu-160-cortex-xdr- 1/
flash-cards/# 4