Labour Day Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: scxmas70

PCDRA Exam Dumps - Palo Alto Networks Certified Detection and Remediation Analyst

Question # 4

Which of the following best defines the Windows Registry as used by the Cortex XDRagent?

A.

a hierarchical database that stores settings for the operating system and for applications

B.

a system of files used by the operating system to commit memory that exceeds the available hardware resources. Also known as the “swap”

C.

a central system, available via the internet, for registering officially licensed versions of software to prove ownership

D.

a ledger for maintaining accurate and up-to-date information on total disk usage and disk space remaining available to the operating system

Full Access
Question # 5

When creating a scheduled report which is not an option?

A.

Run weekly on a certain day and time.

B.

Run quarterly on a certain day and time.

C.

Run monthly on a certain day and time.

D.

Run daily at a certain time (selectable hours and minutes).

Full Access
Question # 6

When selecting multiple Incidents at a time, what options are available from the menu when a user right-clicks the incidents? (Choose two.)

A.

Assign incidents to an analyst in bulk.

B.

Change the status of multiple incidents.

C.

Investigate several Incidents at once.

D.

Delete the selected Incidents.

Full Access
Question # 7

When investigating security events, which feature in Cortex XDR is useful for reverting the changes on the endpoint?

A.

Remediation Automation

B.

Machine Remediation

C.

Automatic Remediation

D.

Remediation Suggestions

Full Access
Question # 8

Which statement is true for Application Exploits and Kernel Exploits?

A.

The ultimate goal of any exploit is to reach the application.

B.

Kernel exploits are easier to prevent then application exploits.

C.

The ultimate goal of any exploit is to reach the kernel.

D.

Application exploits leverage kernel vulnerability.

Full Access
Question # 9

Which of the following represents the correct relation of alerts to incidents?

A.

Only alerts with thesame host are grouped together into one Incident in a given time frame.

B.

Alerts that occur within a three hour time frame are grouped together into one Incident.

C.

Alerts with same causality chains that occur within a given time frame are grouped together into an Incident.

D.

Every alert creates a new Incident.

Full Access