ExamGecko
Question list
Search
Search

Question 82 - PCDRA discussion

Report
Export

Can you disable the ability to use the Live Terminal feature in Cortex XDR?

A.
Yes, via the Cortex XDR console or with an installation switch.
Answers
A.
Yes, via the Cortex XDR console or with an installation switch.
B.
No, a separate installer package without Live Terminal is required.
Answers
B.
No, a separate installer package without Live Terminal is required.
C.
No, it is a required feature of the agent.
Answers
C.
No, it is a required feature of the agent.
D.
Yes, via Agent Settings Profile.
Answers
D.
Yes, via Agent Settings Profile.
Suggested answer: D

Explanation:

The Live Terminal feature in Cortex XDR allows you to initiate a remote connection to an endpoint and perform various actions such as running commands, uploading and downloading files, and terminating processes. You can disable the ability to use the Live Terminal feature in Cortex XDR by configuring the Agent Settings Profile. The Agent Settings Profile defines the behavior and functionality of the Cortex XDR agent on the endpoint. You can create different profiles for different groups of endpoints and assign them accordingly. To disable the Live Terminal feature, you need to uncheck theEnable Live Terminaloption in the Agent Settings Profile and save the changes. This will prevent the Cortex XDR agent from accepting any Live Terminal requests from the Cortex XDR management console.Reference:

Live Terminal: This document explains how to use the Live Terminal feature to investigate and respond to security events on Windows endpoints.

Agent Settings Profile: This document describes how to create and manage Agent Settings Profiles to define the behavior and functionality of the Cortex XDR agent on the endpoint.

asked 23/09/2024
Christopher Adams
40 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first