Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Palo Alto Networks Exam PCDRA Topic 2 Question 74 Discussion

Actual exam question for Palo Alto Networks's PCDRA exam
Question #: 74
Topic #: 2
[All PCDRA Questions]

Which two types of exception profiles you can create in Cortex XDR? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: B

To pivot within a row to Causality view and Timeline views for further investigation, you can use the Open Card and Open Timeline actions respectively. The Open Card action will open a new tab with the Causality view of the selected row, showing the causal chain of events that led to the alert. The Open Timeline action will open a new tab with the Timeline view of the selected row, showing the chronological sequence of events that occurred on the affected endpoint. These actions allow you to drill down into the details of each alert and understand the root cause and impact of the incident.Reference:

Cortex XDR User Guide, Chapter 9: Investigate Alerts, Section: Pivot to Causality View and Timeline View

PCDRA Study Guide, Section 3: Investigate and Respond to Alerts, Objective 3.1: Investigate alerts using the Causality view and Timeline view


Contribute your Thoughts:

Rosendo
15 days ago
B and D sound like they could work, but I'm not entirely sure. Guess I'll have to read the documentation again.
upvoted 0 times
...
Charlesetta
16 days ago
I think A and C are the correct answers. Gotta love those global exception profiles!
upvoted 0 times
...
Floyd
17 days ago
I'm not sure, but I think C could also be a valid option since it applies to all endpoints.
upvoted 0 times
...
Tasia
22 days ago
I agree with Janna, creating exception profiles for specific endpoints makes sense.
upvoted 0 times
...
Janna
25 days ago
I think A and B are the correct options.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77