Edu 260b Cortex XDR 3

Download as pdf or txt
Download as pdf or txt
You are on page 1of 1

Cortex™ XDR 3.

6:
Prevention and Deployment (EDU-260)
This instructor-led training enables you to prevent attacks on your endpoints. After an overview of the Cortex XDR components, the
training introduces the Cortex XDR management console and demonstrates how to install agents on your endpoints and how to create
Security profiles and policies.

The training enables you to perform and track response actions, tune profiles, and work with Cortex XDR alerts. It concludes by
discussing basic troubleshooting of the agent, the on-premises Broker VM component, and Cortex XDR deployment.

Objectives
Course Modules
Successful completion of this instructor-led course with hands-on lab activities
1 - Cortex XDR Introduction should enable you to:

2 - Cortex XDR Main Components  Describe the architecture and components of the Cortex XDR family • Use the
Cortex XDR management console, including reporting
3 - Cortex XDR Management Console
 Create Cortex XDR agent installation packages, endpoint groups, and policies •
4 – Profiles and Policies Deploy Cortex XDR agents on endpoints
5 - Malware Protection  Create and manage Exploit and Malware Prevention profiles
6 - Exploit Protection  Investigate alerts and prioritize them using starring and exclusion policies • Tune
Security profiles using Cortex XDR exceptions
7 - Cortex XDR Alerts
 Perform and track response actions in the Action Center
8 – Exclusions and Exceptions
 Perform basic troubleshooting related to Cortex XDR agents
9 - Response Actions
 Deploy a Broker VM and activate the Local Agents Settings applet • Understand
10 - Basic Troubleshooting Cortex XDR deployment concepts and activation requirements

11 - Broker VM Overview  Work with the Customer Support Portal and Cortex XDR Gateway for
authentication and authorization
12 - Deployment Considerations
Target Audience
Scope  Cybersecurity analysts and engineers
 Level: Intermediate  Security operations specialists
 Duration: 3 days Prerequisites
 Format: Lecture and hands-on labs Participants must be familiar with enterprise product deployment, networking, and
 Platform support: Cortex XDR Pro per Endpoint security concepts.

Palo Alto Networks Education


The technical curriculum developed and authorized by Palo Alto Networks and
delivered by Palo Alto Networks Authorized Training Partners helps provide the
knowledge and expertise that prepare you to protect our digital way of life. Our
trusted certifications validate your knowledge of the Palo Alto Networks product
portfolio and your ability to help prevent successful cyberattacks, safely enable
applications, and automate effective responses to security events.

3000 Tannery Way © 2023 Palo Alto Networks, Inc. Palo Alto Networks is a registered
Santa Clara, CA 95054 trademark of Palo Alto Networks. A list of our trademarks can be found at
https://www. paloaltonetworks.com/company/trademarks.html. All other
Main: +1.408.753.4000 marks mentioned herein may be trademarks of their respective companies.
Sales: +1.866.320.4788
Support: +1.866.898.9087
www.paloaltonetworks.com

You might also like