Question 1

What is an event-driven snippet of code that runs on managed infrastructure?

Options :

A : API

B : Serverless function

C : Hypervisor

D : Docker container

Answer: B

Question 2

Which of the following best describes the primary function of Endpoint Detection and Response (EDR) in an endpoint security strategy?

Options :

A : To detect, investigate, and respond to advanced threats and suspicious activities on endpoints.

B : To block all incoming network traffic from untrusted sources at the endpoint level.

C : To automatically patch vulnerabilities in endpoint operating systems and applications.

D : To provide file encryption to prevent unauthorized data access during breaches.

Answer: A

Question 3

During an endpoint security audit, you are tasked with identifying potential risks associated with Portable Executable (PE) files. Which of the following scenarios highlights a critical security risk posed by malicious PE files?

Options :

A : PE files can execute scripts written in languages like Python or JavaScript.

B : PE files can load dynamic link libraries (DLLs) from untrusted locations, enabling DLL hijacking.

C : PE files automatically delete themselves after execution to evade forensic analysis.

D : PE files can overwrite BIOS firmware, permanently disabling the system.

Answer: B

Question 4

Which of the following data sources can Cortex XDR use to detect and investigate security incidents?

Options :

A : Only endpoint data collected from managed devices.

B : Raw packet captures from all network interfaces.

C : Firewall logs and email logs exclusively.

D : Endpoint, network, and cloud data for extended detection and response.

Answer: D

Question 5

An organization is migrating its infrastructure to the cloud. During the migration, the security team identifies several challenges related to securing the cloud environment. Which of the following are valid cloud security challenges? (Choose two)

Options :

A : Shared responsibility model misunderstandings.

B : Lack of centralized visibility across multiple cloud platforms.

C : Lack of compliance regulations for cloud service providers.

D : Cloud environments being immune to insider threats.

E : The inability to encrypt data stored in the cloud.

Answer: A,B

Free Cybersecurity-Practitioner Mock Exam – Practice Online Confidently

Buying Options: