Paloalto Networks PCDRA Palo Alto Networks Certified Detection and Remediation Analyst Exam Practice Test

Click the three dots on the widget andthen choose “Save” and this will link the query to the Widget Library.

This isn’t supported, you have to exit the dashboard and go into the Widget Library first to create it.

Click on “Save to Action Center” in the dashboard and you will be promptedto give the query a name and description.

Click on “Save to Widget Library” in the dashboard and you will be prompted to give the query a name and description.

Syslog servers

Third-Party security devices

Cortex XDR agents

Palo Alto Networks Next-Generation Firewalls

Security Manager Dashboard

Data Ingestion Dashboard

Security Admin Dashboard

Incident Management Dashboard

in the macOS Malware Protection Profile to indicate allowed signers

in the Linux Malware Protection Profile to indicate allowed Java libraries

SHA256 hashes cannot be used in Cortex XDR Malware Protection Profiles

in the Windows Malware Protection Profile to indicate allowed executables

Create Behavioral Threat Protection (BTP) rules to recognize and prevent the activity.

Enable DLL Protection on all servers but there might be some false positives.

Create IOCs of the malicious files you have found to prevent their execution.

Enable Behavioral Threat Protection (BTP) with cytool to prevent the attack from spreading.

Remediation Automation

Machine Remediation

Automatic Remediation

Remediation Suggestions

Unit 42 is responsible for automation and orchestration of products

Unit 42 is responsible for theconfiguration optimization of the Cortex XDR server

Unit 42 is responsible for threat research, malware analysis and threat hunting

Unit 42 is responsible for the rapid deployment of Cortex XDR agents

1GB disk space

2GB disk space

512GB disk space

256GB disk space

Netflow Collector

Syslog Collector

DB Collector

Pathfinder