Which Cortex XDR capability extends investigations to an endpoint?
Suggested Answer: A
Get Premium PSE-Cortex Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
21 comments · newest first
EL
Elouise
1 month ago
A) Log Stitching helps in understanding the logs better.
SH
Sheldon
1 month ago
I lean towards B) Causality Chain. It shows the sequence of events.
YU
Yuki
2 months ago
D) Live Terminal is crucial for real-time access.
VA
Vanda
2 months ago
C) Sensors seems right. They monitor everything.
WI
Willie
2 months ago
I feel like A) Log Stitching is important too. It gathers data.
CA
Carlota
2 months ago
I think it's B) Causality Chain. It connects the dots.
JE
Jeanice
2 months ago
C) Sensors are crucial, but they don’t extend investigations directly.
JO
Joaquin
2 months ago
A) Log Stitching could help too, but it's more about logs.
EA
Earlean
3 months ago
True, but Live Terminal is more about control, not investigation.
RE
Renea
3 months ago
I'm not so sure. What about D) Live Terminal? It allows real-time access.
JU
Junita
3 months ago
I agree! Causality Chain shows the sequence of actions.
TA
Tammi
3 months ago
I think it's B) Causality Chain. It connects events.
AZ
Azalee
3 months ago
I agree with Junita, Live Terminal makes the most sense!
AN
Annett
3 months ago
Wait, is it really D? That seems too obvious.
LI
Lizette
4 months ago
A) Log Stitching is definitely not the answer.
KA
Kanisha
5 months ago
I thought it was C) Sensors, but I could be wrong.
JU
Junita
5 months ago
I'm pretty sure it's D) Live Terminal.
ME
Merlyn
6 months ago
I practiced a similar question, and I think Sensors could be the right answer, but I need to double-check my notes.
SH
Shenika
6 months ago
I feel like Log Stitching is more about data correlation rather than extending investigations.
WE
Weldon
6 months ago
I remember studying the Causality Chain, but I can't recall if it directly relates to endpoint investigations.
BE
Becky
6 months ago
I think the capability that extends investigations to an endpoint might be Live Terminal, but I'm not entirely sure.