(Preferable in 2024) Updated Palo Alto Networks PCDRA Dumps V9.02 – Pass Your PCDRA Exam Successfully

1. Phishing belongs to which of the following MITRE ATT&CK tactics?

2. When creating a BIOC rule, which XQL query can be used?

3. Which built-in dashboard would be the best option for an executive, if they were looking for the Mean Time to Resolution (MTTR) metric?

4. What are two purposes of “Respond to Malicious Causality Chains” in a Cortex XDR Windows Malware profile? (Choose two.)

5. When creating a custom XQL query in a dashboard, how would a user save that XQL query to the Widget Library?

6. What license would be required for ingesting external logs from various vendors?

7. An attacker tries to load dynamic libraries on macOS from an unsecure location.

Which Cortex XDR module can prevent this attack?

8. What is the purpose of the Unit 42 team?

9. Which Type of IOC can you define in Cortex XDR?

10. When viewing the incident directly, what is the “assigned to” field value of a new Incident that was just reported to Cortex?

11. In incident-related widgets, how would you filter the display to only show incidents that were “starred”?

12. Where would you view the WildFire report in an incident?

13. What does the following output tell us?

14. Which engine, of the following, in Cortex XDR determines the most relevant artifacts in each alert and aggregates all alerts related to an event into an incident?

15. Which type of BIOC rule is currently available in Cortex XDR?

16. In Windows and macOS you need to prevent the Cortex XDR Agent from blocking execution of a file based on the digital signer.

What is one way to add an exception for the singer?

17. As a Malware Analyst working with Cortex XDR you notice an alert suggesting that there was a prevented attempt to download Cobalt Strike on one of your servers. Days later, you learn about a massive ongoing supply chain attack. Using Cortex XDR you recognize that your server was compromised by the attack and that Cortex XDR prevented it.

What steps can you take to ensure that the same protection is extended to all your servers?

18. Which statement is true based on the following Agent Auto Upgrade widget?

19. What is the purpose of targeting software vendors in a supply-chain attack?

20. What is the standard installation disk space recommended to install a Broker VM?

21. Where can SHA256 hash values be used in Cortex XDR Malware Protection Profiles?

22. How does Cortex XDR agent for Windows prevent ransomware attacks from compromising the file system?

23. What functionality of the Broker VM would you use to ingest third-party firewall logs to the Cortex Data Lake?

24. In the deployment of which Broker VM applet are you required to install a strong cipher SHA256-based SSL certificate?

25. When is the wss (WebSocket Secure) protocol used?

26. With a Cortex XDR Prevent license, which objects are considered to be sensors?

27. Which license is required when deploying Cortex XDR agent on Kubernetes Clusters as a DaemonSet?

28. What kind of the threat typically encrypts user files?

29. When using the “File Search and Destroy” feature, which of the following search hash type is supported?

30. If you have an isolated network that is prevented from connecting to the Cortex Data Lake, which type of Broker VM setup can you use to facilitate the communication?