ExamGecko
Search Search Login
Home Home / Palo Alto Networks / PCDRA
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which of the following protection modules is checked first in the Cortex XDR Windows agent malware protection flow?
You can star security events in which two ways? (Choose two.)
When is the wss (WebSocket Secure) protocol used?
When reaching out to TAC for additional technical support related to a Security Event; what are two critical pieces of information you need to collect from the Agent? (Choose Two)
Why would one threaten to encrypt a hypervisor or, potentially, a multiple number of virtual machines running on a server?
What is the maximum number of agents one Broker VM local agent applet can support?
Where would you go to add an exception to exclude a specific file hash from examination by the Malware profile for a Windows endpoint?
What is the Wildfire analysis file size limit for Windows PE files?
In Windows and macOS you need to prevent the Cortex XDR Agent from blocking execution of a file based on the digital signer. What is one way to add an exception for the singer?
What does the following output tell us?

Question 51 - PCDRA discussion

Report
Export

Where can SHA256 hash values be used in Cortex XDR Malware Protection Profiles?

A.
in the macOS Malware Protection Profile to indicate allowed signers
Answers
A.
in the macOS Malware Protection Profile to indicate allowed signers
B.
in the Linux Malware Protection Profile to indicate allowed Java libraries
Answers
B.
in the Linux Malware Protection Profile to indicate allowed Java libraries
C.
SHA256 hashes cannot be used in Cortex XDR Malware Protection Profiles
Answers
C.
SHA256 hashes cannot be used in Cortex XDR Malware Protection Profiles
D.
in the Windows Malware Protection Profile to indicate allowed executables
Answers
D.
in the Windows Malware Protection Profile to indicate allowed executables
Suggested answer: D

Explanation:

Cortex XDR Malware Protection Profiles allow you to configure the malware prevention settings for Windows, Linux, and macOS endpoints. You can use SHA256 hash values in the Windows Malware Protection Profile to indicate allowed executables that you want to exclude from malware scanning. This can help you reduce false positives and improve performance by skipping the scanning of known benign files. You can add up to 1000 SHA256 hash values per profile. You cannot use SHA256 hash values in the Linux or macOS Malware Protection Profiles, but you can use other criteria such as file path, file name, or signer to exclude files from scanning.Reference:

Malware Protection Profiles

Configure a Windows Malware Protection Profile

PCDRA Study Guide

Show Answer
asked 23/09/2024
Vilfride Lutumba
41 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms