Free PAN-SOP Web TestEngine Demo

Q1 Single choice

An analyst is investigating a critical incident on a Windows server in which a malware execution led to numerous file deletions and registry key changes. The affected files and registry keys need to be restored efficiently and quickly.

Which Cortex XDR response action should the analyst select?

A
Execute the Isolate Endpoint action, which automatically reverses all known malware-related changes upon successful isolation.
B
Run the Search and Destroy action on all affected endpoints to automatically replace all files with a "good" hash from the content update package.
C
Initiate a Live Terminal session and use operating system commands to manually copy original files from a network share and import a clean registry hive.
D
Use the Remediation Suggestions action to review and apply the recommended actions for restoring the files and registry values.

PAN-SOP Web TestEngine demo