PCDRA Question 74

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  I agree with the link listed below

• Chose C2

  C https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-XQL-Language-Reference/Datasets-and-Presets Datasets - The standard, built-in data source that is available in every Cortex XDR instance is the xdr_data dataset.This dataset is comprised of both raw EDR events reported by the Cortex XDR agent, and of logs from different sources such as third-party logs. Presets - Presets offer groupings of xdr_data fields that are useful for analyzing specific areas of network and endpoint activity.

• 1

  I agree with "C" as the answer. Datasets can contain Cortex XDR data but also third-party data; presets are predefined configurations that help to simplify and standardize the process of creating reports and/or visualizations based on the data source (dataset)