Q: 1
[Cortex XDR Agent Configuration]
Based on the Malware profile image below, what happens when a new custom-developed
application attempts to execute on an endpoint?


Options
Discussion
Option B. saw a similar question in recent exam reports and the profile blocks unknown apps.
I don’t think it’s A since strict profiles on Cortex XDR usually block unknown or custom-developed apps unless whitelisted. B is what the exam seems to test for here, though people often get tripped up by thinking only malware is blocked.
Be respectful. No spam.