PCDRA Exam Questions

Which search methods is supported by File Search and Destroy?

Which of the following Live Terminal options are available for Android systems?

What contains a logical schema in an XQL query?

Which minimum Cortex XDR agent version is required for Kubernetes Cluster?

In the Cortex XDR console, from which two pages are you able to manually perform the agent upgrade action? (Choose two.)

Which version of python is used in live terminal?

Under which conditions is Local Analysis evoked to evaluate a file before the file is allowed to run?

What is the difference between presets and datasets in XQL?

Cortex XDR is deployed in the enterprise and you notice a cobalt strike attack via an ongoing supply chain compromise was prevented on 1 server. What steps can you take to ensure t...

Why would one threaten to encrypt a hypervisor or, potentially, a multiple number of virtual machines running on a server?

What types of actions you can execute with live terminal session?

How can you pivot within a row to Causality view and Timeline views for further investigate?

What motivation do ransomware attackers have for returning access to systems once their victims have paid?

What is the WildFire analysis file size limit for Windows PE files?

Which Exploit Prevention Module (EPM) provides better entropy for randomization of memory locations?

To stop a network-based attack, any interference with a portion of the attack pattern is enough to prevent it from succeeding. Which statement is correct regarding the Cortex XDR A...

The Cortex XDR console has triggered an incident, blocking a vitally important piece of software in your organization that is known to be benign. Which of the following options wou...

What kind of malware uses encryption, data theft, denial of service, and possibly harassment to take advantage of a victim?

As a Malware Analyst working with Cortex XDR you notice an alert suggesting that there was a prevented attempt to open a malicious Word document. You learn from the WildFire report...

Can you disable the ability to use the Live Terminal feature in Cortex XDR?

Which module provides the best visibility to view vulnerabilities?

If you have an isolated network that is prevented from connecting to the Cortex Data Lake, which type of Broker VM setup can you use to facilitate the communication?

Which built-in dashboard would be the best option for an executive, if they were looking for the Mean Time to Resolution (MTTR) metric?

Which statement best describes how Behavioral Threat Protection (BTP) works?

The Action Center can be found on which tab?

How does an attacker prefer to carry out supply-chain attacks?

What does the term "TCP/IP" stand for?

Which of the following is a summary of the remediation suggestions to apply to the file or registry?

Which engine, of the following, in Cortex XDR determines the most relevant artifacts in each alert and aggregates all alerts related to an event into an incident?

Which type of BIOC rule is currently available in Cortex XDR?

In Windows and macOS you need to prevent the Cortex XDR Agent from blocking execution of a file based on the digital signer. What is one way to add an exception for the singer?

As a Malware Analyst working with Cortex XDR you notice an alert suggesting that there was a prevented attempt to download Cobalt Strike on one of your servers. Days later, you lea...

Which statement is true based on the following Agent Auto Upgrade widget?

What is the purpose of targeting software vendors in a supply-chain attack?

The Response action breakdown widget belongs to which of the following widget categories?

You notice that a hardware device is damaged and important data files have been completely erased from the system. What kind of threat appears to be present here?

What is the expiration limit set by Cortex XDR by default for agent upgradation and agent uninstall?

A Linux endpoint with a Cortex XDR Pro per Endpoint license and Enhanced Endpoint Data enabled has reported malicious activity, resulting in the creation of a file that you wish to...

Which of the following best defines the Windows Registry as used by the Cortex XDR agent?

Which statement best describes how Behavioral Threat Protection (BTP) works?

Which of the following paths will successfully activate Remediation Suggestions?

In Cortex XDR management console scheduled reports can be forwarded to which of the following applications/services?

Which type of IOC can you define in Cortex XDR?

How much RAM is required in Cortex XDR agent 7.2 for Windows?

The analytics engine creates and maintains a very large number of profile types, but they can all be categorized into how many categories in general?

Cortex XDR automatically disables BIOC rules that reach how many hits over what period of time?

What kind of the threat typically encrypts user files?

When using the "File Search and Destroy" feature, which of the following search hash type is supported?

If you have an isolated network that is prevented from connecting to the Cortex Data Lake, which type of Broker VM setup can you use to facilitate the communication?

What is by far the most common tactic used by ransomware to shut down a victim's operation?