Q: 9
Which two benefits come from using the Query Library in Cortex XDR? (Choose two)
Options
Discussion
Actually, I'd say C. The Query Library should help with scheduling reports, right? I remember reading something about automating that process in practice questions. Not totally certain but C feels like a decent pick here.
Option C
Saving and sharing queries is what the Query Library actually does so A, B.
A and B. Query Library's main perks are saving and sharing queries, not automating reports or making incidents. C is tempting but that's handled elsewhere in XDR, not the Library itself. If anyone's seen scheduling as a direct library feature let me know, but pretty sure that's a common trap here.
A and B tbh, official guide and exam practice both call those out for Query Library.
If the question isn't talking about automating or scheduling, I think it's A and B. Query Library is mainly for saving and sharing queries, not for report scheduling. Maybe in some specific configs C could apply? Not totally sure.
The Query Library in Cortex XDR is really for saving and sharing custom queries (A and B), not for automating reports or converting to incidents. Pretty sure those extra features are handled elsewhere, not in the library itself. Anyone see it work differently in real setups?
C , exam practice questions mention scheduling so that's what I picked. Official guide might help check.
A and B
Option A and B. Those are the actual Query Library benefits, not C or D.
Be respectful. No spam.
