XDR-Analyst Practice Questions

A.  

next to relevant Key Artifacts in the incidents details page

B.  

under Response --> Action Center

C.  

under the gear icon --> Agent Audit Logs

D.  

on the HUB page at apps.paloaltonetworks.com

A.  

Malware Protection profile

B.  

Malware profile

C.  

Malware Detection profile

D.  

Anti-Malware profile

A.  

BTP injects into known vulnerable processes to detect malicious activity.

B.  

BTP runs on the Cortex XDR and distributes behavioral signatures to all agents.

C.  

BTP matches EDR data with rules provided by Cortex XDR.

D.  

BTP uses machine Learning to recognize malicious activity even if it is not known.

A.  

Bin

B.  

Array expand

C.  

Field

D.  

Dataset

A.  

Security Manager Dashboard

B.  

Data Ingestion Dashboard

C.  

Security Admin Dashboard

D.  

Incident Management Dashboard

A.  

In the Restrictions Profile, add the file name and path to the Executable Files allow list.

B.  

Create a new rule exception and use the singer as the characteristic.

C.  

Add the signer to the allow list in the malware profile.

D.  

Add the signer to the allow list under the action center page.

A.  

Manage Network configurations, Quarantine Files, Run PowerShell scripts

B.  

Manage Processes, Manage Files, Run Operating System Commands, Run Ruby Commands and Scripts

C.  

Apply patches, Reboot System, send notification for end user, Run Python Commands and Scripts

D.  

Manage Processes, Manage Files, Run Operating System Commands, Run Python Commands and Scripts