2022 Updated Verified PCDRA dumps Q&As – 100% Pass Guaranteed [Q18-Q42]

Q18. Which type of BIOC rule is currently available in Cortex XDR?

Q19. In incident-related widgets, how would you filter the display to only show incidents that were “starred”?

Q20. Which module provides the best visibility to view vulnerabilities?

Q21. Which of the following protection modules is checked first in the Cortex XDR Windows agent malware protection flow?

Q22. What functionality of the Broker VM would you use to ingest third-party firewall logs to the Cortex Data Lake?

Q23. What is the purpose of the Cortex Data Lake?

Q24. What kind of the threat typically encrypts user files?

Q25. When creating a BIOC rule, which XQL query can be used?

Q26. Which module provides the best visibility to view vulnerabilities?

Q27. Where would you view the WildFire report in an incident?

Q28. Which of the following best defines the Windows Registry as used by the Cortex XDR agent?

Q29. When is the wss (WebSocket Secure) protocol used?

Q30. As a Malware Analyst working with Cortex XDR you notice an alert suggesting that there was a prevented attempt to download Cobalt Strike on one of your servers. Days later, you learn about a massive ongoing supply chain attack. Using Cortex XDR you recognize that your server was compromised by the attack and that Cortex XDR prevented it. What steps can you take to ensure that the same protection is extended to all your servers?

Q31. Which license is required when deploying Cortex XDR agent on Kubernetes Clusters as a DaemonSet?

Q32. Which profiles can the user use to configure malware protection in the Cortex XDR console?

Q33. A Linux endpoint with a Cortex XDR Pro per Endpoint license and Enhanced Endpoint Data enabled has reported malicious activity, resulting in the creation of a file that you wish to delete. Which action could you take to delete the file?

Q34. With a Cortex XDR Prevent license, which objects are considered to be sensors?

Q35. Which statement is true based on the following Agent Auto Upgrade widget?

Q36. How does Cortex XDR agent for Windows prevent ransomware attacks from compromising the file system?

Q37. Network attacks follow predictable patterns. If you interfere with any portion of this pattern, the attack will be neutralized. Which of the following statements is correct?

Q38. What are two purposes of “Respond to Malicious Causality Chains” in a Cortex XDR Windows Malware profile? (Choose two.)

Q39. What is the outcome of creating and implementing an alert exclusion?

Q40. When using the “File Search and Destroy” feature, which of the following search hash type is supported?

Q41. What is by far the most common tactic used by ransomware to shut down a victim’s operation?