Question

Cortex XDR holds two block lists:

a) Endpoint and Network
b) Whitelist and Blacklist
c) URL and Application
d) IP and Domain

Answer 1

Cortex XDR maintains two block lists to secure against cyber threats: an IP block list and a domain block list, used to filter out known malicious IP addresses and domains, respectively.

Step-by-step explanation:

The student is asking about the block lists that are part of Cortex XDR, which is a cybersecurity platform. Cortex XDR provides a variety of security features to protect against cyber threats. One of the components of this platform is the maintenance of block lists that prevent potentially dangerous or malicious entities from causing harm. The correct answer to which two block lists Cortex XDR maintains is: d) IP and Domain.

These block lists are used to prevent harmful traffic from reaching the network or endpoint devices. An IP block list will block specific IP addresses that are known to be associated with malicious activities, while a domain block list will prevent access to URLs that have been identified as dangerous or are part of phishing and malware distribution networks.