최신Palo Alto Networks Certified Detection and Remediation Analyst - PCDRA무료샘플문제

A. A dataset is a built-in orthird-partysource; presets group XDR data fields.

B. A dataset is a database; presets is a field.

C. A dataset is a Cortex data lake data source only; presets are built-in data source.

D. A dataset is a third-party data source; presets are built-in data source.

A. Create a global exception.

B. Create an endpoint-specific exception.

C. Create a global inclusion.

D. Create an individual alert exclusion.

A. Create an alert-starring configuration.

B. Manually star an alert.

C. Manually star an Incident.

D. Create an Incident-starring configuration.

A. TCP, over port 80

B. WebSocket

C. NetBIOS over TCP

D. UDP and a random port

A. This isn't supported, you have to exit the dashboard and go into the Widget Library first to create it.

B. Click on "Save to Widget Library" in the dashboard and you will be prompted to give the query a name and description.

C. Click on "Save to Action Center" in the dashboard and you will be prompted to give the query a name and description.

D. Click the three dots on the widget and then choose "Save" and this will link the query to the Widget Library.

A. WildFire runs entirely on the agent to quickly analyse samples and provide a verdict.

B. WildFire runs in the cloud and analyses alert data from the XDR agent to check for behavioural threats.

C. WildFire is the engine that runs on the local agent and determines whether behavioural threats are occurring on the endpoint.

D. WildFire accepts and analyses a sample to provide a verdict.

A. Process exception

B. Support exception

C. Behavioral threat protection rule exception

D. Local file threat examination exception

A. Enable DLL Protection on all servers but there might be some false positives.

B. Create lOCs of the malicious files you have found to prevent their execution.

C. Enable Behavioral Threat Protection (BTP) with cytool to prevent the attack from spreading.

D. Conduct a thorough Endpoint Malware scan.

A. It is true negative.

B. It is true positive.

C. It is a false negative.

D. It is false positive.

A. to access source code.

B. to steal users' login credentials.

C. to report Zero-day vulnerabilities.

D. to take advantage of a trusted software delivery method.