What is the function of WildFire for Cortex XDR?

The correct answer is C. WildFire accepts and analyses a sample to provide a verdict. WildFire is Palo Alto Networks' cloud-based threat analysis service. Its core function in the context of Cortex XDR is to accept and analyze file samples (such as unknown executables or documents) and return a verdict - benign, malware, grayware, or phishing. It does not run on…

Submitted by lukas.cz· Apr 18, 2026Detection and Alert Management

Question

Options

AWildFire runs in the cloud and analyses alert data from the XDR agent to check for behavioural
BWildFire is the engine that runs on the local agent and determines whether behavioural threats are
CWildFire accepts and analyses a sample to provide a verdict.
DWildFire runs entirely on the agent to quickly analyse samples and provide a verdict.

How the community answered

(67 responses)

A
6% (4)
B
1% (1)
C
88% (59)
D
4% (3)

Explanation

WildFire is Palo Alto Networks' cloud-based threat analysis service. Its core function in the context of Cortex XDR is to accept and analyze file samples (such as unknown executables or documents) and return a verdict - benign, malware, grayware, or phishing. It does not run on the local agent (ruling out B and D), and it does not analyze behavioral alert data from XDR agents (ruling out A). WildFire operates as a cloud sandbox, performing static and dynamic analysis to classify files.

Topics

#WildFire#Sample Analysis#Threat Verdict

Community Discussion

No community discussion yet for this question.

Full PCDRA Practice