최신 Security Operations Generalist SecOps-Pro 무료샘플문제:

1. A security analyst is tuning Cortex XDR after a custom application, which uses the mshta.exe utility with a legitimate internal script, triggers a behavioral threat alert. The administrator must ensure the legitimate script runs without detection. Which set of criteria must be included in the new exception rule to prevent future false positives while maintaining protection against similar malicious activity?

A) Signature or signer of the mshta.exe binary
B) Alert exclusion that is based on the name of the threat
C) File name hash (SHA256) of the mshta.exe file
D) Exception based on the process path and script command-line arguments

2. What are two outcomes of threat intelligence in a SOC? (Choose two.)

A) Reduction of the number of alerts observed in an incident
B) Enablement of security operations teams to reduce workload through automation
C) Identification and detection of known threat verdicts to improve company security posture
D) Mitigation of potential risks to systems and data

3. Which two statements apply to creating scripts in Cortex XSOAR? (Choose two.)

A) They can be executed with higher permissions.
B) They can be protected using a password.
C) They can be scheduled to run at a later time and day.
D) They can be written using Java.

4. Which function eliminates the need for manual analysis in an organization with multiple data sensors?

A) Log stitching
B) Event log query
C) Log correlation
D) Log forwarding

5. Which query language will perform a deep investigation into a series of potential endpoint attacks by searching across all collected event data using Cortex XDR Query Builder?

A) XQL
B) KQL
C) SPL
D) SQL

질문과 대답: