Free Palo Alto Networks PCDRA Exam Dumps Questions & Answers

Which statement is correct based on the report output below?

• A.  Forensic inventory data collection is enabled.
• B.  3,297 total incidents have been detected.
• C.  Host Inventory Data Collection is enabled.
• D.  133 agents have full disk encryption.

Where would you go to add an exception to exclude a specific file hash from examination by the Malware profile for a Windows endpoint?

• A.  In the Action Center, choose Allow list, select new action, select add to allow list, add your hash to the list, and apply it.
• B.  Find the Malware profile attached to the endpoint, Under Portable Executable and DLL Examination add the hash to the allow list.
• C.  From the rules menu select new exception, fill out the criteria, choose the scope to apply it to, hit save.
• D.  Find the exceptions profile attached to the endpoint, under process exceptions select local analysis, paste the hash and save.

What are two purposes of "Respond to Malicious Causality Chains" in a Cortex XDR Windows Malware profile? (Choose two.)

• A.  Automatically kill the processes involved in malicious activity.
• B.  Automatically block the IP addresses involved in malicious traffic.
• C.  Automatically close the connections involved in malicious traffic.
• D.  Automatically terminate the threads involved in malicious activity.

What is the purpose of the Unit 42 team?

• A.  Unit 42 is responsible for the rapid deployment of Cortex XDR agents
• B.  Unit 42 is responsible for threat research, malware analysis and threat hunting
• C.  Unit 42 is responsible for the configuration optimization of the Cortex XDR server
• D.  Unit 42 is responsible for automation and orchestration of products

As a Malware Analyst working with Cortex XDR you notice an alert suggesting that there was a prevented attempt to download Cobalt Strike on one of your servers. Days later, you learn about a massive ongoing supply chain attack. Using Cortex XDR you recognize that your server was compromised by the attack and that Cortex XDR prevented it. What steps can you take to ensure that the same protection is extended to all your servers?

• A.  Create IOCs of the malicious files you have found to prevent their execution.
• B.  Enable DLL Protection on all servers but there might be some false positives.
• C.  Create Behavioral Threat Protection (BTP) rules to recognize and prevent the activity.
• D.  Enable Behavioral Threat Protection (BTP) with cytool to prevent the attack from spreading.