Download
Security_Operations_7.4_Analyst_Exam_Description.pdf
Question :21
The Quarantine Endpoint by EMS playbook execution failed.
What can you conclude from reviewing the playbook tasks and raw logs?
1. The endpoint is quarantined, but the action status is not attached to the incident.
2. The local connector is incorrectly configured, which is causing JSON API errors.
3. The admin user does not have the necessary rights to update incidents.
4. The EMS connector is up, but the local connector is down.
Ans:1
[ add comment ] | permalink | print article | related link |
( 3 / 33 )
Random Entry