Free Palo Alto Networks XDR-Analyst Exam Dumps Questions & Answers

Which license is required when deploying Cortex XDR agent on Kubernetes Clusters as a DaemonSet?

• A.Cortex XDR Pro per TB
• B.Cortex XDR Cloud per Host
• C.Host Insights
• D.Cortex XDR Pro per Endpoint

Which module provides the best visibility to view vulnerabilities?

• A.Live Terminal module
• B.Host Insights module
• C.Forensics module
• D.Device Control Violations module

How can you pivot within a row to Causality view and Timeline views for further investigate?

• A.You can't pivot within a row to Causality view and Timeline views
• B.Using the Open Card Only
• C.Using Open Timeline Actions Only
• D.Using the Open Card and Open Timeline actions respectively

What is the difference between presets and datasets in XQL?

• A.A dataset is a built-in or third-party source; presets group XDR data fields.
• B.A dataset is a Cortex data lake data source only; presets are built-in data source.
• C.A dataset is a database; presets is a field.
• D.A dataset is a third-party data source; presets are built-in data source.

While working the alerts involved in a Cortex XDR incident, an analyst has found that every alert in this incident requires an exclusion. What will the Cortex XDR console automatically do to this incident if all alerts contained have exclusions?

• A.mark the incident as Unresolved
• B.create an exception to prevent future false positives
• C.create a BIOC rule excluding this behavior
• D.mark the incident as Resolved - False Positive