Palo Alto Networks Certified Detection and Remediation Analyst - PCDRA 模擬練習

A. to take advantage of a trusted software delivery method.

B. to access source code.

C. to report Zero-day vulnerabilities.

D. to steal users' login credentials.

A. Run monthly on a certain day and time.

B. Run quarterly on a certain day and time.

C. Run daily at a certain time (selectable hours and minutes).

D. Run weekly on a certain day and time.

A. Initial Access, Persistence

B. Reconnaissance, Persistence

C. Reconnaissance, Initial Access

D. Persistence, Command and Control

A. You can't pivot within a row to Causality view and Timeline views

B. Using Open Timeline Actions Only

C. Using the Open Card Only

D. Using the Open Card and Open Timeline actions respectively

A. CSV Collector

B. Syslog Collector

C. Agent Proxy

D. Agent Installer and Content Caching

A. Enable Behavioral Threat Protection (BTP) with cytool to prevent the attack from spreading.

B. Create Behavioral Threat Protection (BTP) rules to recognize and prevent the activity.

C. Enable DLL Protection on all servers but there might be some false positives.

D. Create IOCs of the malicious files you have found to prevent their execution.

A. Action Center

B. Endpoint Administration

C. Agent Installations

D. Asset Management

A. UASLR

B. Memory Limit Heap spray check

C. JIT Mitigation

D. DLL Security

A. Netflow Collector

B. Pathfinder

C. DB Collector

D. Syslog Collector

A. the workspace for your Cortex XDR agents to detonate potential malware files

B. a local storage facility where your logs and alert data can be aggregated

C. a cloud-based storage facility where your firewall logs are stored

D. the interface between firewalls and the Cortex XDR agents