PCDRA Practice Online

Question 1

Where would you go to add an exception to exclude a specific file hash from examination by the Malware profile for a Windows endpoint?

A : Find the Malware profile attached to the endpoint, Under Portable Executable and DLL Examination add the hash to the allow list

B : From the rules menu select new exception, fill out the criteria, choose the scope to apply it to, hit save.

C : Find the exceptions profile attached to the endpoint, under process exceptions select local analysis, paste the hash and save.

D : In the Action Center, choose Allow list, select new action, select add to allow list, add your hash to the list, and apply it.

Answer: B

Question 2

What does the following output tell us?

A : There is one low severity incident

B : Host shpapy_win10 had the most vulnerabilities.

C : There is one informational severity alert.

D : This is an actual output of the Top 10 hosts with the most malware.

Answer: D

Question 3

Phishing belongs which of the following MITRE ATT&CK tactics?

A : Initial Access, Persistence

B : Persistence, Command and Control

C : Reconnaissance, Persistence

D : Reconnaissance, Initial Access

Answer: D

Question 4

Which profiles can the user use to configure malware protection in the Cortex XDR console?

A : Malware Protection profile

B : Malware profile

C : Malware Detection profile

D : Anti-Malware profile

Answer: B

Question 5

Where would you view the WildFire report in an incident?

A : next to relevant Key Artifacts in the incidents details page

B : under Response --> Action Center

C : under the gear icon --> Agent Audit Logs

D : on the HUB page at apps.paloaltonetworks.com

Answer: B

Name:	Palo Alto Networks Certified Detection and Remediation Analyst
Exam Code:	PCDRA
Certification:	Paloalto Networks
Vendor:	Palo Alto Networks
Total Questions:	98
Last Updated:	May 06, 2024