Practice PCDRA Exam Online

Question 1

Which type of BIOC rule is currently available in Cortex XDR?

A : Threat Actor

B : Discovery

C : Network

D : Dropper

Answer: D

Question 2

Which of the following is NOT a precanned script provided by Palo Alto Networks?

A : delete_file

B : quarantine_file

C : process_kill_name

D : list_directories

Answer: B

Question 3

Where would you go to add an exception to exclude a specific file hash from examination by the Malware profile for a Windows endpoint?

A : Find the Malware profile attached to the endpoint, Under Portable Executable and DLL Examination add the hash to the allow list

B : From the rules menu select new exception, fill out the criteria, choose the scope to apply it to, hit save.

C : Find the exceptions profile attached to the endpoint, under process exceptions select local analysis, paste the hash and save.

D : In the Action Center, choose Allow list, select new action, select add to allow list, add your hash to the list, and apply it.

Answer: B

Question 4

What is by far the most common tactic used by ransomware to shut down a victim’s operation?

A : preventing the victim from being able to access APIs to cripple infrastructure

B : denying traffic out of the victims network until payment is received

C : restricting access to administrative accounts to the victim

D : encrypting certain files to prevent access by the victim

Answer: D

Question 5

Which profiles can the user use to configure malware protection in the Cortex XDR console?

A : Malware Protection profile

B : Malware profile

C : Malware Detection profile

D : Anti-Malware profile

Answer: B

Name:	Palo Alto Networks Certified Detection and Remediation Analyst
Exam Code:	PCDRA
Certification:	Paloalto Networks
Vendor:	Palo Alto Networks
Total Questions:	98
Last Updated:	Apr 24, 2024

Palo Alto Networks PCDRA