ExamGecko
Question list
Search
Search

Question 13 - PCDRA discussion

Report
Export

How can you pivot within a row to Causality view and Timeline views for further investigate?

A.
Using the Open Card Only
Answers
A.
Using the Open Card Only
B.
Using the Open Card and Open Timeline actions respectively
Answers
B.
Using the Open Card and Open Timeline actions respectively
C.
You can't pivot within a row to Causality view and Timeline views
Answers
C.
You can't pivot within a row to Causality view and Timeline views
D.
Using Open Timeline Actions Only
Answers
D.
Using Open Timeline Actions Only
Suggested answer: B

Explanation:

To pivot within a row to Causality view and Timeline views for further investigation, you can use the Open Card and Open Timeline actions respectively. The Open Card action will open a new tab with the Causality view of the selected row, showing the causal chain of events that led to the alert. The Open Timeline action will open a new tab with the Timeline view of the selected row, showing the chronological sequence of events that occurred on the affected endpoint. These actions allow you to drill down into the details of each alert and understand the root cause and impact of the incident.Reference:

Cortex XDR User Guide, Chapter 9: Investigate Alerts, Section: Pivot to Causality View and Timeline View

PCDRA Study Guide, Section 3: Investigate and Respond to Alerts, Objective 3.1: Investigate alerts using the Causality view and Timeline view


asked 23/09/2024
Reaper Gamer
43 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first