PCDRA practice questions 61–70

1. Question 61 · 88 in bank

   What should you do to automatically convert leads into alerts after investigating a lead?

   • ALead threats can't be prevented in the future because they already exist in the environment.
   • BBuild a search query using Query Builder or XQL using a list of IOCs.
   • CCreate IOC rules based on the set of the collected attribute-value pairs over the affected entities concluded during the lead hunting.
   • DCreate BIOC rules based on the set of the collected attribute-value pairs over the affected entities concluded during the lead hunting.

   Show answer

   Answer: D

   Next question

2. Question 62 · 88 in bank

   Select 2

   When reaching out to TAC for additional technical support related to a Security Event; what are two critical pieces of information you need to collect from the Agent? (Choose two.)

   • AThe prevention archive from the alert.
   • BThe unique agent id.
   • CThe distribution id of the agent.
   • DThe agent technical support file.
   • EA list of all the current exceptions applied to the agent.

   Show answer

   Answer: BD

   Next question

3. Question 63 · 88 in bank

   Which function describes the removal of a specific file from its location on a local or removable drive to a protected folder to prevent the file from being executed?

   • ASearch & destroy
   • BQuarantine
   • CIsolation
   • DFlag for removal

   Show answer

   Answer: B

   Next question

4. Question 64 · 88 in bank

   What is the maximum number of agents one Broker VM local agent applet can support?

   • A10,000
   • B15,000
   • C5,000
   • D20,000

   Show answer

   Answer: C

   Next question

5. Question 65 · 88 in bank

   Which of the following represents a common sequence of cyber attack tactics?

   • AActions on the objective >> Reconnaissance >> Weaponisation & Delivery >> Exploitation >> Installation >> Command & Control
   • BInstallation >> Reconnaissance >> Weaponisation & Delivery >> Exploitation >> Command & Control >> Actions on the objective
   • CReconnaissance >> Installation >> Weaponisation & Delivery >> Exploitation >> Command & Control >> Actions on the objective
   • DReconnaissance >> Weaponisation & Delivery >> Exploitation >> Installation >> Command & Control >> Actions on the objective

   Show answer

   Answer: D

   Next question

6. Question 66 · 88 in bank

   An attacker tries to load dynamic libraries on macOS from an unsecure location. Which Cortex XDR module can prevent this attack?

   • ADDL Security
   • BHot Patch Protection
   • CKernel Integrity Monitor (KIM)
   • DDylib Hijacking

   Show answer

   Answer: D

   Explanation

   Dylib Hijacking Prevents Dylib-hijacking attacks where the attacker attempts to load dynamic libraries on Mac operating systems from unsecured locations to gain control of a process.

   Source: Adapted from community discussion — Karreldanam

   Next question

7. Question 67 · 88 in bank

   Which Exploit Protection Module (EPM) can be used to prevent attacks based on OS function?

   • AMemory Limit Heap Spray Check
   • BDLL Security
   • CUASLR
   • DJIT Mitigation

   Show answer

   Answer: B

   Next question

8. Question 68 · 88 in bank

   Which statement is correct based on the report output below?

   

   • AForensic inventory data collection is enabled.
   • B133 agents have full disk encryption.
   • C3,297 total incidents have been detected.
   • DHost Inventory Data Collection is enabled.

   Show answer

   Answer: D

   Next question

9. Question 69 · 88 in bank

   Which search methods is supported by File Search and Destroy?

   • AFile Search and Repair
   • BFile Seek and Destroy
   • CFile Search and Destroy
   • DFile Seek and Repair

   Show answer

   Answer: C

   References

   • live.paloaltonetworks.com documentation

   Next question

10. Question 70 · 88 in bank

    Which of the following Live Terminal options are available for Android systems?

    • ARun Android commands.
    • BLive Terminal is not supported.
    • CRun APK scripts.
    • DStop an app.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCDRA practice, question 61. 88 questions available.