The certificate used for decryption was installed as a trusted root CA certificate to ensure communication between the Cortex XDR Agent and Cortex XDR Management Console What action needs to be taken if the administrator determines the Cortex XDR Agents are not communicating with the Cortex XDR Management Console?

Correct Answer:D

The prospect is deciding whether to go with a phishing or a ServiceNow use case as part of their POC We have integrations for both but a playbook for phishing only Which use case should be used for the POC?

Correct Answer:A

Which two entities can be created as a BIOC? (Choose two.)

Correct Answer:AB
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/cortex-xd

In Cortex XDR Prevent, which three matching criteria can be used to dynamically group endpoints? (Choose three )

Correct Answer:BCD

The images show two versions of the same automation script and the results they produce when executed in Demisto. What are two possible causes of the exception thrown in the second Image? (Choose two.)
SUCCESS

Correct Answer:A

"Bob" is a Demisto user. Which command is used to add 'Bob" to an investigation from the War Room CLI?

Correct Answer:C