PCDRA practice questions 71–80

1. Question 71 · 88 in bank

   What contains a logical schema in an XQL query?

   • AField
   • BBin
   • CDataset
   • DArrayexpand

   Show answer

   Answer: C

   Next question

2. Question 72 · 88 in bank

   Which minimum Cortex XDR agent version is required for Kubernetes Cluster?

   • ACortex XDR 7.4
   • BCortex XDR 5.0
   • CCortex XDR 7.5
   • DCortex XDR 6.1

   Show answer

   Answer: C

   Explanation

   I agree with the links below. second link states it is a requirement. also both of these versions are listed as EoL, fyi

   Source: Adapted from community discussion — Chiquitabandita

   Next question

3. Question 73 · 88 in bank

   Select 2

   In the Cortex XDR console, from which two pages are you able to manually perform the agent upgrade action? (Choose two.)

   • AEndpoint Administration
   • BAsset Management
   • CAction Center
   • DAgent Installations

   Show answer

   Answer: AC

   Next question

4. Question 74 · 88 in bank

   Which version of python is used in live terminal?

   • APython 3 with specific XDR Python libraries developed by Palo Alto Networks
   • BPython 3 with standard Python libraries
   • CPython 2 and 3 with standard Python libraries
   • DPython 2 and 3 with specific XDR Python libraries developed by Palo Alto Networks

   Show answer

   Answer: B

   Next question

5. Question 75 · 88 in bank

   Under which conditions is Local Analysis evoked to evaluate a file before the file is allowed to run?

   • AThe endpoint is disconnected or the verdict from WildFire is of a type malware.
   • BThe endpoint is disconnected or the verdict from WildFire is of a type unknown.
   • CThe endpoint is disconnected or the verdict from WildFire is of a type grayware.
   • DThe endpoint is disconnected or the verdict from WildFire is of a type benign.

   Show answer

   Answer: B

   Next question

6. Question 76 · 88 in bank

   What is the difference between presets and datasets in XQL?

   • AA dataset is a Cortex data lake data source only; presets are built-in data source.
   • BA dataset is a database; presets is a field.
   • CA dataset is a built-in or third party source; presets group XDR data fields.
   • DA dataset is a third-party data source; presets are built-in data source.

   Show answer

   Answer: C

   Explanation

   C https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-XQL-Language-Reference/Datasets-and-Presets Datasets - The standard, built-in data source that is available in every Cortex XDR instance is the xdr_data dataset.This dataset is comprised of both raw EDR events reported by the Cortex XDR agent, and of logs from different sources such as third-party logs. Presets - Presets offer groupings of xdr_data fields that are useful for analyzing specific areas of network and endpoint activity.

   Source: Adapted from community discussion — MatchaLatte

   Next question

7. Question 77 · 88 in bank

   What is the purpose of the Unit 42 team?

   • AUnit 42 is responsible for automation and orchestration of products
   • BUnit 42 is responsible for the configuration optimization of the Cortex XDR server
   • CUnit 42 is responsible for threat research, malware analysis and threat hunting
   • DUnit 42 is responsible for the rapid deployment of Cortex XDR agents

   Show answer

   Answer: C

   Next question

8. Question 78 · 88 in bank

   Cortex XDR is deployed in the enterprise and you notice a cobalt strike attack via an ongoing supply chain compromise was prevented on 1 server. What steps can you take to ensure the same protection is extended to all your servers?

   • AEnable DLL Protection on all servers but there might be some false positives.
   • BConduct a thorough Endpoint Malware scan.
   • CCreate IOCs of the malicious files you have found to prevent their execution.
   • DEnable Behavioral Threat Protection (BTP) with cytool to prevent the attack from spreading.

   Show answer

   Answer: C

   Next question

9. Question 79 · 88 in bank

   Why would one threaten to encrypt a hypervisor or, potentially, a multiple number of virtual machines running on a server?

   • ATo extort a payment from a victim or potentially embarrass the owners.
   • BTo gain notoriety and potentially a consulting position.
   • CTo better understand the underlying virtual infrastructure.
   • DTo potentially perform a Distributed Denial of Attack.

   Show answer

   Answer: A

   Next question

10. Question 80 · 88 in bank

    What types of actions you can execute with live terminal session?

    • AManage Processes, Manage Files, Run Operating System Commands, Run Python Commands and Scripts
    • BManage Network configurations, Quarantine Files, Run Powershell scripts
    • CApply patches, Reboot System, Send notification for end user, Run Python Commands and Scripts
    • DManage Processes, Manage Files, Run Operating System Commands, Run Ruby Commands and Scripts

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCDRA practice, question 71. 88 questions available.