Summer Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: cramtreat

PCDRA Palo Alto Networks Certified Detection and Remediation Analyst Questions and Answers

Questions 4

What is by far the most common tactic used by ransomware to shut down a victim’s operation?

Options:

A.

preventing the victim from being able to access APIs to cripple infrastructure

B.

denying traffic out of the victims network until payment is received

C.

restricting access to administrative accounts to the victim

D.

encrypting certain files to prevent access by the victim

Buy Now
Questions 5

Which statement is true based on the following Agent Auto Upgrade widget?

Options:

A.

There are a total of 689 Up To Date agents.

B.

Agent Auto Upgrade was enabled but not on all endpoints.

C.

Agent Auto Upgrade has not been enabled.

D.

There are more agents in Pending status than InProgress status.

Buy Now
Questions 6

With a Cortex XDR Prevent license, which objects are considered to be sensors?

Options:

A.

Syslog servers

B.

Third-Party security devices

C.

Cortex XDR agents

D.

Palo Alto Networks Next-Generation Firewalls

Buy Now
Questions 7

What does the following output tell us?

Options:

A.

There is one lowseverity incident.

B.

Host shpapy_win10 had the most vulnerabilities.

C.

There is one informational severity alert.

D.

This is an actual output of the Top 10 hosts with the most malware.

Buy Now
Questions 8

When creating a BIOC rule, which XQL query can be used?

Options:

A.

dataset = xdr_data

| filterevent_sub_type = PROCESS_START and

action_process_image_name ~= ".*?\.(?:pdf|docx)\.exe"

B.

dataset = xdr_data

| filter event_type = PROCESS and

event_sub_type = PROCESS_START and

action_process_image_name ~= ".*?\.(?:pdf|docx)\.exe"

C.

dataset = xdr_data

| filter action_process_image_name ~= ".*?\.(?:pdf|docx)\.exe"

| fields action_process_image

D.

dataset = xdr_data

| filter event_behavior = true

event_sub_type = PROCESS_START and

action_process_image_name ~=".*?\.(?:pdf|docx)\.exe"

Buy Now
Questions 9

What functionality of the Broker VM would you use to ingest third-party firewall logs to the Cortex Data Lake?

Options:

A.

Netflow Collector

B.

Syslog Collector

C.

DB Collector

D.

Pathfinder

Buy Now
Exam Code: PCDRA
Exam Name: Palo Alto Networks Certified Detection and Remediation Analyst
Last Update: Jul 19, 2024
Questions: 91
PCDRA pdf

PCDRA PDF

$28  $80
PCDRA Engine

PCDRA Testing Engine

$33.25  $95
PCDRA PDF + Engine

PCDRA PDF + Testing Engine

$45.5  $130