Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA - Cortex XDR) Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  I would go for "D" since the threat is already being prevented/stopped by the Cortex XDR Agent

• 1

  Nvm, I will go for "B" as a precaution measure and build additional BTP rules to detect similar behaviors in the future

• 1

  Another odd question because BTP rules are created and managed by Palo Alto Networks, not by admins... so maybe C?