During daily security operations, an analyst must distinguish log-focused operations from user or role administration in Cortex XDR. Which concept or feature should they use?

Question

Accepted Answer

A. Log management. Log management is correct because Palo Alto Networks ties it to the function of users, roles, log management, compliance, and data protection in Cortex XDR. That makes it the best fit when the practitioner needs to distinguish log-focused operations from user or role administration in Cortex XDR. SOC roles and responsibilities is not correct because it addresses a different requirement within Security Operations Fundamentals.

During daily security operations, an analyst must distinguish log-focused operations from user or role administration in Cortex XDR. Which concept or feature should they use?

Related Questions

Discussion