SentinelOne THP Practice Questions - SentinelOne Threat Hunting Professional (THP, S1-301) Exam

Access More Questions

When creating a STAR (Storyline Active Response) rule from a validated Deep Visibility query, which response action can STAR automatically execute on a matching endpoint WITHOUT requiring analyst interaction?

Delete the endpoint agent and reinstall with a clean policy Open a ServiceNow ticket and assign it to the on-call analyst Kill the matching process and optionally network-quarantine the endpoint Upload a full memory image to the Singularity Data Lake for later analysis

Correct Answer:

Kill the matching process and optionally network-quarantine the endpoint

Access more questions from this quiz

Continue to SentinelOne THP Practice Questions - SentinelOne Threat Hunting Professional (THP, S1-301) Exam for more practice questions and the full quiz experience.

Access More Questions