Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA - Cortex XDR) Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose AD1

  You can manually star an INCIDENT but you also can add an starring ALERT configuration. I checked the Cortex XDR to double check, and "AD" are the right choices.

• 1

  Odd enough the fact that the documentation says you can create an incident starring configuration, but the Cortex XDR Console says "Alert starring configuration", I'd change the answer to "BD" just because that's what the documentation says about it and the exam has probably been created from that.

• Chose BD1

  From stduy guıde: You can star incidents in two ways: You can manually star an incident after reviewing it, or you can create an incident-starring configuration that automatically categorizes and stars incidents when a related alert contains the specific attributes that you decide are important.