Câu 5: XSIAM-ANALYST: Palo Alto Networks Certified XSIAM Analyst

A Cortex XSIAM analyst is investigating a security incident involving a workstation after having deployed a Cortex XDR agent for 45 days. The incident details include the Cortex XDR Analytics Alert "Uncommon remote scheduled task creation."Which response will mitigate the threat?

1. A. Revoke user access and conduct a user audit.
2. B. Allow list the processes to reduce alert noise.
3. C. Initiate the endpoint isolate action to contain the threat. — đáp án hiện tại
4. D. Prioritize blocking the source IP address to prevent further login attempts.