SecOps-Pro › Threat Detection And Incident Response

Threat Detection And Incident Response Practice Questions

This domain covers Cortex XDR and Cortex XSOAR detection and response workflows: reading alerts, tracing process ancestry, configuring data sources for XQL hunting, isolating compromised endpoints, and documenting incident actions. Questions are scenario-based, asking you to pick the correct Cortex XDR action, tab, or query source rather than recall definitions.