SecOps Professional 270-383 Practice Questions & Answers • ExamPrepare

Question 1

Which two roles can access data model rules in Cortex XSIAM? (Choose two.)

Instance administrator
Account administrator
IT administrator
Deployment administrator

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

How is internal proprietary source code classified?

Internal Use Only
Private
Restricted
Confidential

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Which component of Cortex XDR would allow an analyst to determine if suspicious user activity deviates from normal user activity?

Identity Analytics
Network traffic analysis
Host Insights
Behavioral Threat Protection (BTP)

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

During a sophisticated cyber attack, a company experiences a multivector intrusion that evades detection by traditional security tools.

The company requires a solution that will correlate and analyze the disparate attack indicators across its network, endpoints, and cloud environments to uncover the full scope of the breach and take immediate automated response actions.

Which solution should be recommended?

XDR
XSOAR
SIEM
EDR

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

In Cortex XDR, what can be used to notify analysts of atomic behavior related to processes, registry, files, and network activity?

Indicator of compromise (IOC)
Analytics behavioral indicator of compromise (ABIOC)
Behavioral indicator of compromise (BIOC)
Network traffic analysis (NTA)

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

What will enable ingestion of on-premises firewall logs into Cortex XDR?

API
PAN-OS content pack
Cloud Identity Engine
Broker VM

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.