Free PCDRA Exam Questions - Easiest Way for Success

Prepare for the Palo Alto Networks PCDRA exam questions with our authentic preparation materials, including free PCDRA practice exam questions and answers. TheExamsLab provides all the support you need to succeed in the Palo Alto Networks Certified Detection and Remediation Analyst PCDRA exam. This dedication to student success is why we have the most satisfied PCDRA certification exam candidates worldwide.

Page: 1 / 20

Total 98 Questions | Updated On: Sep 13, 2024

Add To Cart

Question 1

Phishing belongs which of the following MITRE ATT&CK tactics?

A : Initial Access, Persistence

B : Persistence, Command and Control

C : Reconnaissance, Persistence

D : Reconnaissance, Initial Access

Answer: D

Question 2

Where would you go to add an exception to exclude a specific file hash from examination by the Malware profile for a Windows endpoint?

A : Find the Malware profile attached to the endpoint, Under Portable Executable and DLL Examination add the hash to the allow list

B : From the rules menu select new exception, fill out the criteria, choose the scope to apply it to, hit save.

C : Find the exceptions profile attached to the endpoint, under process exceptions select local analysis, paste the hash and save.

D : In the Action Center, choose Allow list, select new action, select add to allow list, add your hash to the list, and apply it.

Answer: B

Question 3

What are two purposes of “Respond to Malicious Causality Chains” in a Cortex XDR Windows Malware profile? (Choose two.)

A : Automatically close the connections involved in malicious traffic

B : Automatically kill the processes involved in malicious activity.

C : Automatically terminate the threads involved in malicious activity.

D : Automatically block the IP addresses involved in malicious traffic.

Answer: A,D

Question 4

Which profiles can the user use to configure malware protection in the Cortex XDR console?

A : Malware Protection profile

B : Malware profile

C : Malware Detection profile

D : Anti-Malware profile

Answer: B

Question 5

Which Exploit Prevention Module (EPM) provides better entropy for randomization of memory locations?

A : UASLR

B : JIT Mitigation

C : Memory Limit Heap spray check

D : DLL Security

Answer: A

Page: 1 / 20

Total 98 Questions | Updated On: Sep 13, 2024

Add To Cart