PCDRA practice question 1 of 15
Which of the following paths will successfully activate Remediation Suggestions?
Full set: 91 questionsRemediation Suggestions is a feature of Cortex XDR that provides you with recommended actions to remediate the root cause and impact of an incident. Remediation Suggestions are based on the analysis of the causality chain, the behavior of the malicious files or processes, and the best practices for incident response. Remediation Suggestions can help you to quickly and effectively contain and resolve an incident, as well as prevent future recurrence. To activate Remediation Suggestions, you need to follow these steps: In the Cortex XDR management console, go to Incidents and select an incident that you want to remediate. Click Causality View to see the graphical representation of the causality chain of the incident. Click Actions and select Remediation Suggestions. This will open a new window that shows the suggested actions for each node in the causality chain. Review the suggested actions and select the ones that you want to apply. You can also edit or delete the suggested actions, or add your own custom actions. Click Apply to execute the selected actions on the affected endpoints. You can also schedule the actions to run at a later time or date.
Reference: Remediate Changes from Malicious Activity: This document explains how to use Remediation Suggestions to remediate the root cause and impact of an incident. Causality View: This document describes how to use Causality View to investigate the causality chain of an incident.
Keep practicing
Take the free PCDRA practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PCDRA practice questions
- Question 2What is the purpose of targeting software vendors in a supply-chain attack?
- Question 4Phishing belongs to which of the following MITRE ATT&CK tactics?
- Question 5When using the “File Search and Destroy” feature, which of the following search hash type…
- Question 6Which type of BIOC rule is currently available in Cortex XDR?
- Question 7When creating a BIOC rule, which XQL query can be used?
- Question 8In incident-related widgets, how would you filter the display to only show incidents that…
