ExamGecko
Login
Home / Palo Alto Networks / PCDRA / List of questions
Ask Question

Palo Alto Networks PCDRA Practice Test - Questions Answers, Page 3

Add to Whishlist

List of questions

Question 21

Report Export Collapse

As a Malware Analyst working with Cortex XDR you notice an alert suggesting that there was a prevented attempt to open a malicious Word document. You learn from the WildFire report and AutoFocus that this document is known to have been used in Phishing campaigns since 2018. What steps can you take to ensure that the same document is not opened by other users in your organization protected by the Cortex XDR agent?

Become a Premium Member for full access
  Unlock Premium Member

Question 22

Report Export Collapse

What types of actions you can execute with live terminal session?

Become a Premium Member for full access
  Unlock Premium Member

Question 23

Report Export Collapse

Which version of python is used in live terminal?

Become a Premium Member for full access
  Unlock Premium Member

Question 24

Report Export Collapse

What kind of malware uses encryption, data theft, denial of service, and possibly harassment to take advantage of a victim?

Become a Premium Member for full access
  Unlock Premium Member

Question 25

Report Export Collapse

Which function describes the removal of a specific file from its location on a local or removable drive to a protected folder to prevent the file from being executed?

Become a Premium Member for full access
  Unlock Premium Member

Question 26

Report Export Collapse

A Linux endpoint with a Cortex XDR Pro per Endpoint license and Enhanced Endpoint Data enabled has reported malicious activity, resulting in the creation of a file that you wish to delete. Which action could you take to delete the file?

Become a Premium Member for full access
  Unlock Premium Member

Question 27

Report Export Collapse

Which of the following best defines the Windows Registry as used by the Cortex XDR agent?

Become a Premium Member for full access
  Unlock Premium Member

Question 28

Report Export Collapse

Which statement best describes how Behavioral Threat Protection (BTP) works?

Become a Premium Member for full access
  Unlock Premium Member

Question 29

Report Export Collapse

Which of the following policy exceptions applies to the following description?

'An exception allowing specific PHP files'

Become a Premium Member for full access
  Unlock Premium Member

Question 30

Report Export Collapse

When reaching out to TAC for additional technical support related to a Security Event; what are two critical pieces of information you need to collect from the Agent? (Choose Two)

Become a Premium Member for full access
  Unlock Premium Member
Total 91 questions
Go to page: of 10
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which of the following protection modules is checked first in the Cortex XDR Windows agent malware protection flow?
You can star security events in which two ways? (Choose two.)
When reaching out to TAC for additional technical support related to a Security Event; what are two critical pieces of information you need to collect from the Agent? (Choose Two)
Cortex XDR is deployed in the enterprise and you notice a cobalt strike attack via an ongoing supply chain compromise was prevented on 1 server. What steps can you take to ensure the same protection is extended to all your servers?
Which statement best describes how Behavioral Threat Protection (BTP) works?
When is the wss (WebSocket Secure) protocol used?
Why would one threaten to encrypt a hypervisor or, potentially, a multiple number of virtual machines running on a server?
The Cortex XDR console has triggered an incident, blocking a vitally important piece of software in your organization that is known to be benign. Which of the following options would prevent Cortex XDR from blocking this software in the future, for all endpoints in your organization?
What is the purpose of the Cortex Data Lake?
Under which conditions is Local Analysis evoked to evaluate a file before the file is allowed to run?