PCDRA試験無料問題集（93題）「Palo Alto Networks Certified Detection and Remediation Analyst 認定」

出題：1

Network attacks follow predictable patterns. If you interfere with any portion of this pattern, the attack will be neutralized. Which of the following statements is correct?

A. Cortex XDR Analytics allows to interfere with the pattern as soon as it is observed on the endpoint.

B. Cortex XDR Analytics allows to interfere with the pattern as soon as it is observed on the firewall.

C. Cortex XDR Analytics does not have to interfere with the pattern as soon as it is observed on the endpoint in order to prevent the attack.

D. Cortex XDR Analytics does not interfere with the pattern as soon as it is observed on the endpoint.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

What motivation do ransomware attackers have for returning access to systems once their victims have paid?

A. The ransomware attackers hope to trace the financial trail back and steal more from traditional banking institutions. -

B. Nation-states enforce the return of system access through the use of laws and regulation.

C. Failure to restore access to systems undermines the scheme because others will not believe their valuables would be returned.

D. There is organized crime governance among attackers that requires the return of access to remain in good standing.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Why would one threaten to encrypt a hypervisor or, potentially, a multiple number of virtual machines running on a server?

A. To potentially perform a Distributed Denial of Attack.

B. To extort a payment from a victim or potentially embarrass the owners.

C. To gain notoriety and potentially a consulting position.

D. To better understand the underlying virtual infrastructure.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which module provides the best visibility to view vulnerabilities?

A. Device Control Violations module

B. Host Insights module

C. Forensics module

D. Live Terminal module

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Where would you go to add an exception to exclude a specific file hash from examination by the Malware profile for a Windows endpoint?

A. Find the Malware profile attached to the endpoint, Under Portable Executable and DLL Examination add the hash to the allow list.

B. Find the exceptions profile attached to the endpoint, under process exceptions select local analysis, paste the hash and save.

C. In the Action Center, choose Allow list, select new action, select add to allow list, add your hash to the list, and apply it.

D. From the rules menu select new exception, fill out the criteria, choose the scope to apply it to, hit save.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

A file is identified as malware by the Local Analysis module whereas WildFire verdict is Benign, Assuming WildFire is accurate. Which statement is correct for the incident?

A. It is a false negative.

B. It is true negative.

C. It is false positive.

D. It is true positive.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which of the following Live Terminal options are available for Android systems?

A. Run Android commands.

B. Live Terminal is not supported.

C. Stop an app.

D. Run APK scripts.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

How can you pivot within a row to Causality view and Timeline views for further investigate?

A. Using the Open Card Only

B. You can't pivot within a row to Causality view and Timeline views

C. Using the Open Card and Open Timeline actions respectively

D. Using Open Timeline Actions Only

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

In Cortex XDR management console scheduled reports can be forwarded to which of the following applications/services?

A. Slack

B. Jira

C. Salesforce

D. Service Now

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

Which of the following protection modules is checked first in the Cortex XDR Windows agent malware protection flow?

A. Behavioral Threat Protection

B. Restriction Policy

C. Hash Verdict Determination

D. Child Process Protection

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

PCDRA試験無料問題集「Palo Alto Networks Certified Detection and Remediation Analyst 認定」