Question 11 · 88 in bank
What is the purpose of targeting software vendors in a supply-chain attack?
Show answer
Answer: A
Palo Alto Networks Certified Detection and Remediation Analyst88 questions across 9 pages are complete and free, with no account or card.
88 questions in this bank
Free access · progress saved on this device
What is the purpose of targeting software vendors in a supply-chain attack?
Answer: A
When creating a BIOC rule, which XQL query can be used?
Answer: B
Correct answer is: B "The XQL query must at a minimum filter on the event_type field in order for it to be a valid BIOC rule."
Source: Adapted from community discussion — 9smiles
What is the standard installation disk space recommended to install a Broker VM?
Answer: C
Correct answer is C From the CXPAG (Cortex XDR Pro Administrator Guide): Before you set up the broker VM, verify you meet the following requirements. Hardware: For standard installation, use a minimum of a 4-core processor, 8GB RAM, and 512GB disk. If you only intend to use the broker VM for agent proxy, you can use a 2-core processor. If you intend to use the broker VM for agent installer and content caching, you must use an 8-core processor.
Source: Adapted from community discussion — 9smiles
Where can SHA256 hash values be used in Cortex XDR Malware Protection Profiles?
Answer: C
How does Cortex XDR agent for Windows prevent ransomware attacks from compromising the file system?
Answer: B
What functionality of the Broker VM would you use to ingest third-party firewall logs to the Cortex Data Lake?
Answer: B
Correct answer: C From the PCDRA Study Guide: 7.5.2 Describe how to use the Broker to ingest third-party alerts ... To ingest data, you must set up the Syslog Collector applet on a broker VM within your network.
Source: Adapted from community discussion — 9smiles
In the deployment of which Broker VM applet are you required to install a strong cipher SHA256-based SSL certificate?
Answer: A
Correct answer: B From the Cortex XDR Pro Administrators Guide (CXPAG): Agent Installer and Content Caching: Requires you upload a strong cipher SHA256-based SSL certificates when you setup the Broker VM.
Source: Adapted from community discussion — 9smiles
When is the wss (WebSocket Secure) protocol used?
Answer: D
Correct answer: D From beacon: WebSocket is a stateful, full-duplex communication protocol that allows a two-way interactive communication between a Cortex XDR instance and Cortex XDR agents. This type of communication allows data transfers in real-time by keeping sessions for a longer durations. When you perform one of these critical response actions from the Cortex XDR management console, the Cortex XDR instance establishes a session between the instance itself and the targeted endpoint. Then, the session is kept alive even after the response action is complete. Live Terminal is among these response actions.
Source: Adapted from community discussion — 9smiles
With a Cortex XDR Prevent license, which objects are considered to be sensors?
Answer: C
Which license is required when deploying Cortex XDR agent on Kubernetes Clusters as a DaemonSet?
Answer: D
Correct answer is: D CXPAD: "To protect a Kubernetes or similar container orchestrator endpoint, Cortex XDR requires a Cortex Cloud per Host license."
Source: Adapted from community discussion — 9smiles
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCDRA practice, question 11. 88 questions available.
Version 1.0.0. How we source questions