Palo Alto Networks Exam PCDRA Topic 12 Question 71 Discussion

Actual exam question for Palo Alto Networks's PCDRA exam

Question #: 71
Topic #: 12

The Cortex XDR console has triggered an incident, blocking a vitally important piece of software in your organization that is known to be benign. Which of the following options would prevent Cortex XDR from blocking this software in the future, for all endpoints in your organization?

ACreate an individual alert exclusion.

BCreate a global inclusion.

CCreate an endpoint-specific exception.

DCreate a global exception.

Show Suggested Answer

Suggested Answer: D

Cortex XDR allows you to schedule reports and forward them to Slack, a cloud-based collaboration platform. You can configure the Slack channel, frequency, and recipients of the scheduled reports. You can also view the report history and status in the Cortex XDR management console.Reference:

Scheduled Queries: This document explains how to create, edit, and manage scheduled queries and reports in Cortex XDR.

Forward Scheduled Reports to Slack: This document provides the steps to configure Slack integration and forward scheduled reports to a Slack channel.

by Vanna at Jan 15, 2025, 01:28 PM

Limited Time Offer

25%

Off

Get Premium PCDRA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Abel

2 months ago

Haha, this is like a game of 'Which door will let me through?' I'm just hoping I don't end up like the goat behind the wrong door!

upvoted 0 times

Geoffrey

13 days ago

C) Create an endpoint-specific exception.

upvoted 0 times

...

Dalene

14 days ago

B) Create a global inclusion.

upvoted 0 times

...

Alica

16 days ago

A) Create an individual alert exclusion.

upvoted 0 times

...

Tuyet

2 months ago

I'm torn between B and D. A global inclusion or a global exception both sound like they could work, but I'm not sure which one is the 'correct' answer. Guess I'd better review the Cortex XDR documentation again.

upvoted 0 times

Louvenia

24 days ago

Yeah, creating a global exception seems like the most efficient way to handle this situation.

upvoted 0 times

...

Natalie

29 days ago

Creating a global inclusion might not be as effective as a global exception in this case.

upvoted 0 times

...

Kenneth

1 months ago

I agree, a global exception would apply to all endpoints in the organization.

upvoted 0 times

...

Tomoko

1 months ago

I agree, a global exception would apply to all endpoints in the organization.

upvoted 0 times

...

Arlene

1 months ago

I think a global exception would be the best option to prevent Cortex XDR from blocking the software.

upvoted 0 times

...

Page

2 months ago

I think a global exception would be the best option to prevent Cortex XDR from blocking the software.

upvoted 0 times

...

Von

3 months ago

I'm not sure, but creating an individual alert exclusion might also work, right?

upvoted 0 times

...

Lashaunda

3 months ago

Option B looks like the way to go. A global inclusion seems like the best way to ensure this software is always allowed, no matter which endpoint it's running on.

upvoted 0 times

Anastacia

2 months ago

User 2: Yeah, that way the software will always be allowed on all endpoints.

upvoted 0 times

...

Hildred

2 months ago

User 1: I think creating a global inclusion is the best option.

upvoted 0 times

...

Lisandra

3 months ago

Hmm, I think option D seems the most straightforward here. Creating a global exception should prevent Cortex XDR from blocking the software across all endpoints.

upvoted 0 times