Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA - Cortex XDR) · Palo Alto Networks
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B and D are correct.
that the answer
The GenericPolling playbook is used as a sub-playbook to block the execution of the master playbook until the remote action is complete. There are a number of playbooks that use the GenericPolling playbook that come out-of-the box, or installed from a content pack such as: Cortex Polling - Generic: Polls a context key to check if a specific value exists. Field Polling - Generic: Polls a field to check if a specific value exists. QRadarFullSearch: Runs a QRadar query and return its results to the context. Scan Assets - Nexpose: Scans according to asset IP addresses or host names from Rapid7 Nexpose, and waits for the scan to finish by polling the scan status in pre-defined intervals. Generally polling is used in the following circumstances: File detonation in a sandbox URL detonation Queries that take a long time to complete The answer is B, D