[Oct 19, 2022] New Real PCDRA Exam Dumps Questions [Q22-Q45]

QUESTION 22
What is by far the most common tactic used by ransomware to shut down a victim’s operation?

QUESTION 23
In Windows and macOS you need to prevent the Cortex XDR Agent from blocking execution of a file based on the digital signer. What is one way to add an exception for the singer?

QUESTION 24
Which built-in dashboard would be the best option for an executive, if they were looking for the Mean Time to Resolution (MTTR) metric?

QUESTION 25
Phishing belongs which of the following MITRE ATT&CK tactics?

QUESTION 26
As a Malware Analyst working with Cortex XDR you notice an alert suggesting that there was a prevented attempt to open a malicious Word document. You learn from the WildFire report and AutoFocus that this document is known to have been used in Phishing campaigns since 2018. What steps can you take to ensure that the same document is not opened by other users in your organization protected by the Cortex XDR agent?

QUESTION 27
What is the purpose of the Unit 42 team?

QUESTION 28
What license would be required for ingesting external logs from various vendors?

QUESTION 29
Which of the following is NOT a precanned script provided by Palo Alto Networks?

QUESTION 30
Which of the following policy exceptions applies to the following description?
‘An exception allowing specific PHP files’

QUESTION 31
Which module provides the best visibility to view vulnerabilities?

QUESTION 32
When is the wss (WebSocket Secure) protocol used?

QUESTION 33
How does Cortex XDR agent for Windows prevent ransomware attacks from compromising the file system?

QUESTION 34
In incident-related widgets, how would you filter the display to only show incidents that were “starred”?

QUESTION 35
To create a BIOC rule with XQL query you must at a minimum filter on which field in order for it to be a valid BIOC rule?

QUESTION 36
What is the purpose of targeting software vendors in a supply-chain attack?

QUESTION 37
With a Cortex XDR Prevent license, which objects are considered to be sensors?

QUESTION 38
Which statement is true based on the following Agent Auto Upgrade widget?

QUESTION 39
What does the following output tell us?

QUESTION 40
Which statement best describes how Behavioral Threat Protection (BTP) works?

QUESTION 41
You can star security events in which two ways? (Choose two.)

QUESTION 42
Where would you view the WildFire report in an incident?

QUESTION 43
Which statement is true for Application Exploits and Kernel Exploits?

QUESTION 44
While working the alerts involved in a Cortex XDR incident, an analyst has found that every alert in this incident requires an exclusion. What will the Cortex XDR console automatically do to this incident if all alerts contained have exclusions?

QUESTION 45
An attacker tries to load dynamic libraries on macOS from an unsecure location. Which Cortex XDR module can prevent this attack?