ExamGecko
Question list
Search
Search

Question 1 - PCDRA discussion

Report
Export

When investigating security events, which feature in Cortex XDR is useful for reverting the changes on the endpoint?

A.
Remediation Automation
Answers
A.
Remediation Automation
B.
Machine Remediation
Answers
B.
Machine Remediation
C.
Automatic Remediation
Answers
C.
Automatic Remediation
D.
Remediation Suggestions
Answers
D.
Remediation Suggestions
Suggested answer: D

Explanation:

When investigating security events, the feature in Cortex XDR that is useful for reverting the changes on the endpoint isRemediation Suggestions. Remediation Suggestions are a feature of Cortex XDR that provide you with recommended actions to undo the effects of malicious activity on your endpoints. You can view the remediation suggestions for each alert or incident in the Cortex XDR console, and decide whether to apply them or not. Remediation Suggestions can help you restore the endpoint to its original state, remove malicious files or processes, or fix registry or system settings. Remediation Suggestions are based on the forensic data collected by the Cortex XDR agent and the analysis performed by Cortex XDR.Reference:

Remediation Suggestions

Apply Remediation Suggestions

asked 23/09/2024
matthew kim
40 questions
NextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first