Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA - Cortex XDR) Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  This license type is often cited in exam discussions but is generally not listed as a standard standalone license in official Palo Alto Networks documentation; it is usually a distractor or a misnomer for the Pro per TB/GB tier.

• Chose B1

  Cortex XDR Vendor Agnostic Pro: This license is designed to handle logs from various vendors, suggesting that it supports ingestion of diverse external logs. Cortex XDR Pro per TB: This license is based on the volume of data (per terabyte), which is suitable for high volumes of log data but may not specifically address the vendor-agnostic nature. If the key factor is the volume of data rather than the specific sources of the logs, Cortex XDR Pro per TB would indeed be a better choice, but the question is clear: "for ingesting external logs from VARIOUS VENDORS". I will go for "B" on this.

• 1

  NVM. Changing my answer to "C". Sorry for the confusion.