Free Practice Palo Alto Networks PCDRA Exam Questions 2025

Stay ahead with 100% Free Palo Alto Networks Certified Detection and Remediation Analyst PCDRA Dumps Practice Questions

Page: 1 / 20

Total 98 Questions | Updated On: Jun 03, 2025

Add To Cart

Question 1

Where would you view the WildFire report in an incident?

A : next to relevant Key Artifacts in the incidents details page

B : under Response --> Action Center

C : under the gear icon --> Agent Audit Logs

D : on the HUB page at apps.paloaltonetworks.com

Answer: B

Question 2

Which type of BIOC rule is currently available in Cortex XDR?

A : Threat Actor

B : Discovery

C : Network

D : Dropper

Answer: D

Question 3

When creating a BIOC rule, which XQL query can be used?

A : dataset = xdr_data| filter event_sub_type = PROCESS_START andaction_process_image_name ~= ".*?\.(?:pdf|docx)\.exe"

B : dataset = xdr_data| filter event_type = PROCESS andevent_sub_type = PROCESS_START andaction_process_image_name ~= ".*?\.(?:pdf|docx)\.exe"

C : dataset = xdr_data| filter action_process_image_name ~= ".*?\.(?:pdf|docx)\.exe"| fields action_process_image

D : dataset = xdr_data| filter event_behavior = trueevent_sub_type = PROCESS_START andaction_process_image_name ~= ".*?\.(?:pdf|docx)\.exe"

Answer: B

Question 4

What are two purposes of “Respond to Malicious Causality Chains” in a Cortex XDR Windows Malware profile? (Choose two.)

A : Automatically close the connections involved in malicious traffic

B : Automatically kill the processes involved in malicious activity.

C : Automatically terminate the threads involved in malicious activity.

D : Automatically block the IP addresses involved in malicious traffic.

Answer: A,D

Question 5

Which profiles can the user use to configure malware protection in the Cortex XDR console?

A : Malware Protection profile

B : Malware profile

C : Malware Detection profile

D : Anti-Malware profile

Answer: B

Page: 1 / 20

Total 98 Questions | Updated On: Jun 03, 2025

Add To Cart