Free Palo Alto Networks PCDRA Exam Dumps Questions & Answers

When using the "File Search and Destroy" feature, which of the following search hash type is supported?

• A.  AES256 hash of the file
• B.  SHA1 hash of the file
• C.  SHA256 hash of the file
• D.  MD5 hash of the file

A Linux endpoint with a Cortex XDR Pro per Endpoint license and Enhanced Endpoint Data enabled has reported malicious activity, resulting in the creation of a file that you wish to delete. Which action could you take to delete the file?

• A.  Open X2go from the Cortex XDR console and delete the file via X2go.
• B.  Manually remediate the problem on the endpoint in question.
• C.  Open an NFS connection from the Cortex XDR console and delete the file.
• D.  Initiate Remediate Suggestions to automatically delete the file.

What are two purposes of "Respond to Malicious Causality Chains" in a Cortex XDR Windows Malware profile? (Choose two.)

• A.  Automatically terminate the threads involved in malicious activity.
• B.  Automatically block the IP addresses involved in malicious traffic.
• C.  Automatically kill the processes involved in malicious activity.
• D.  Automatically close the connections involved in malicious traffic.

What is the function of WildFire for Cortex XDR?

• A.  WildFire is the engine that runs on the local agent and determines whether behavioural threats are occurring on the endpoint.
• B.  WildFire runs entirely on the agent to quickly analyse samples and provide a verdict.
• C.  WildFire runs in the cloud and analyses alert data from the XDR agent to check for behavioural threats.
• D.  WildFire accepts and analyses a sample to provide a verdict.

Which of the following Live Terminal options are available for Android systems?

• A.  Run Android commands.
• B.  Run APK scripts.
• C.  Live Terminal is not supported.
• D.  Stop an app.