Free Palo Alto Networks PCDRA Exam Dumps Questions & Answers

If you have an isolated network that is prevented from connecting to the Cortex Data Lake, which type of Broker VM setup can you use to facilitate the communication?

• A.Broker VM Syslog Collector
• B.Broker VM Pathfinder
• C.Local Agent Proxy
• D.Local Agent Installer and Content Caching

What should you do to automatically convert leads into alerts after investigating a lead?

• A.Create BIOC rules based on the set of the collected attribute-value pairs over the affected entities concluded during the lead hunting.
• B.Create IOC rules based on the set of the collected attribute-value pairs over the affected entities concluded during the lead hunting.
• C.Build a search query using Query Builder or XQL using a list of lOCs.
• D.Lead threats can't be prevented in the future because they already exist in the environment.

When viewing the incident directly, what is the "assigned to" field value of a new Incident that was just reported to Cortex?

• A.New
• B.It is blank
• C.Pending
• D.Unassigned

In incident-related widgets, how would you filter the display to only show incidents that were "starred"?

• A.Create a custom XQL widget
• B.Click the star in the widget
• C.This is not currently supported
• D.Create a custom report and filter on starred incidents

When creating a custom XQL query in a dashboard, how would a user save that XQL query to the Widget Library?

• A.Click on "Save to Widget Library" in the dashboard and you will be prompted to give the query a name and description.
• B.This isn't supported, you have to exit the dashboard and go into the Widget Library first to create it.
• C.Click on "Save to Action Center" in the dashboard and you will be prompted to give the query a name and description.
• D.Click the three dots on the widget and then choose "Save" and this will link the query to the Widget Library.