MENU
An administrator needs to prevent users from connecting unauthorized USB flash drives to their corporate workstations to reduce the risk of data exfiltration. Which Cortex XDR feature should be configured?
Device Control is a specific module within the Cortex XDR agent settings designed to manage and restrict the use of peripheral devices.
Granular Management: It allows administrators to define policies for various device types, most commonly USB Storage devices. You can set these to 'Allow,' 'Block,' or 'Read-Only.'
Exclusions: Policies can be granular, allowing specific vendor IDs (VID) or product IDs (PID) while blocking all others.
Visibility: When a device is blocked, Cortex XDR generates a log entry, providing the SOC with visibility into who is attempting to use unauthorized hardware.
Currently there are no comments in this discussion, be the first to comment!