SecOps Professional 270-406 Practice Questions & Answers • ExamPrepare

Question 1

Which language must be used to define the data displayed in a custom dashboard to track specific network anomalies over time?

SQL
XQL
HTML
JSON

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

In Cortex XDR, what can be used to notify analysts of atomic behavior related to processes, registry, files, and network activity?

Indicator of compromise (IOC)
Analytics behavioral indicator of compromise (ABIOC)
Behavioral indicator of compromise (BIOC)
Network traffic analysis (NTA)

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

How do sensors function in Cortex XSIAM?

They monitor data ingestion health.
They collect logs and telemetry data.
They assist with log stitching.
They monitor endpoint agent health.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

What can be used to triage and determine if an artifact in Cortex XDR is malicious?

SmartScore
MITRE tactic
Issue severity
WildFire report

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

With a Windows endpoint, what is required to remove the Cortex XDR agent when the endpoint is no longer online and cannot be managed directly from the management console?

When running the uninstaller, the administrator must enter an uninstall password from the management console.
An administrator must use Cytool to disable security protection on the endpoint with an uninstall password.
A Cortex XDR administrator must provide the end user with an offline removal tool created in the management console.
An administrator must disable the agent by opening the agent console from the system tray and entering a password.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Which task is the responsibility of a security operations center (SOC) manager?

Managing the overall configuration of endpoint security monitoring tools
Investigating higher-priority security cases escalated from triage
Developing necessary crisis communication plans for security cases
Proactively identifying possible unknown threats, security gaps, and vulnerabilities

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.