Exam XSIAM-Analyst Topic 1 Question 58 Discussion

Actual exam question for Palo Alto Networks's XSIAM-Analyst exam
Question #: 58
Topic #: 1
Match the incident type with an appropriate playbook response action:
Incident Type
A) Ransomware
B) Credential Theft
C) Phishing Email
D) Data Exfiltration
Playbook Action
1. Isolate endpoint and disable network access
2. Reset user password and audit login logs
3. Extract header and delete suspicious emails
4. Block exfiltration domain and terminate session
Response:

Suggested Answer: C Vote an answer

by Sibyl at Nov 03, 2025, 07:52 AM

Limited Time Offer

15%

Off

Get Premium XSIAM-Analyst Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10