PCDRA

PCDRA practice questions, page 2 of 4, with answer review and explanations.

Question 6

What license would be required for ingesting external logs from various vendors?

  1. Cortex XDR Pro per Endpoint
  2. Cortex XDR Vendor Agnostic Pro
  3. Cortex XDR Pro per TB
  4. Cortex XDR Cloud per Host

Question 7

An attacker tries to load dynamic libraries on macOS from an unsecure location. Which Cortex XDR module can prevent this attack?

  1. DDL Security
  2. Hot Patch Protection
  3. Kernel Integrity Monitor (KIM)
  4. Dylib Hijacking

Question 8

What is the purpose of the Unit 42 team?

  1. Unit 42 is responsible for automation and orchestration of products
  2. Unit 42 is responsible for the configuration optimization of the Cortex XDR server
  3. Unit 42 is responsible for threat research, malware analysis and threat hunting
  4. Unit 42 is responsible for the rapid deployment of Cortex XDR agents

Question 9

Which Type of IOC can you define in Cortex XDR?

  1. destination port
  2. e-mail address
  3. full path
  4. App-ID

Question 10

When viewing the incident directly, what is the “assigned to” field value of a new Incident that was just reported to Cortex?

  1. Pending
  2. It is blank
  3. Unassigned
  4. New