Online Access Free PCDRA Practice Test

Which of the following best defines the Windows Registry as used by the Cortex XDR agent?

• A.a ledger for maintaining accurate and up-to-date information on total disk usage and disk space remaining available to the operating system
• B.a central system, available via the internet, for registering officially licensed versions of software to prove ownership
• C.a hierarchical database that stores settings for the operating system and for applications
• D.a system of files used by the operating system to commit memory that exceeds the available hardware resources. Also known as the "swap"

As a Malware Analyst working with Cortex XDR you notice an alert suggesting that there was a prevented attempt to download Cobalt Strike on one of your servers. Days later, you learn about a massive ongoing supply chain attack. Using Cortex XDR you recognize that your server was compromised by the attack and that Cortex XDR prevented it. What steps can you take to ensure that the same protection is extended to all your servers?

• A.Create Behavioral Threat Protection (BTP) rules to recognize and prevent the activity.
• B.Enable Behavioral Threat Protection (BTP) with cytool to prevent the attack from spreading.
• C.Create IOCs of the malicious files you have found to prevent their execution.
• D.Enable DLL Protection on all servers but there might be some false positives.

Network attacks follow predictable patterns. If you interfere with any portion of this pattern, the attack will be neutralized. Which of the following statements is correct?

• A.Cortex XDR Analytics does not have to interfere with the pattern as soon as it is observed on the endpoint in order to prevent the attack.
• B.Cortex XDR Analytics does not interfere with the pattern as soon as it is observed on the endpoint.
• C.Cortex XDR Analytics allows to interfere with the pattern as soon as it is observed on the endpoint.
• D.Cortex XDR Analytics allows to interfere with the pattern as soon as it is observed on the firewall.

Which of the following is NOT a precanned script provided by Palo Alto Networks?

• A.delete_file
• B.quarantine_file
• C.process_kill_name
• D.list_directories

What is the difference between presets and datasets in XQL?

• A.A dataset is a third-party data source; presets are built-in data source.
• B.A dataset is a database; presets is a field.
• C.A dataset is a built-in orthird-partysource; presets group XDR data fields.
• D.A dataset is a Cortex data lake data source only; presets are built-in data source.