Palo Alto Networks Exam PCDRA Topic 6 Question 50 Discussion

Actual exam question for Palo Alto Networks's PCDRA exam

Question #: 50
Topic #: 6

[All PCDRA Questions]

How can you pivot within a row to Causality view and Timeline views for further investigate?

AUsing the Open Card Only

BUsing the Open Card and Open Timeline actions respectively

CYou can't pivot within a row to Causality view and Timeline views

DUsing Open Timeline Actions Only

Show Suggested Answer

Suggested Answer: B

To pivot within a row to Causality view and Timeline views for further investigation, you can use the Open Card and Open Timeline actions respectively. The Open Card action will open a new tab with the Causality view of the selected row, showing the causal chain of events that led to the alert. The Open Timeline action will open a new tab with the Timeline view of the selected row, showing the chronological sequence of events that occurred on the affected endpoint. These actions allow you to drill down into the details of each alert and understand the root cause and impact of the incident.Reference:

Cortex XDR User Guide, Chapter 9: Investigate Alerts, Section: Pivot to Causality View and Timeline View

PCDRA Study Guide, Section 3: Investigate and Respond to Alerts, Objective 3.1: Investigate alerts using the Causality view and Timeline view

by Marge at Apr 13, 2024, 06:47 AM

Limited Time Offer

25%

Off

Get Premium PCDRA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Helaine

5 months ago

I think option D is incorrect. It's using the Open Card and Open Timeline actions to pivot within a row to Causality view and Timeline views.

upvoted 0 times

...

Valene

6 months ago

I disagree with option C. I think you can pivot within a row to Causality view and Timeline views using the Open Card and Open Timeline actions.

upvoted 0 times

...

Jina

6 months ago

I believe option B is correct. You can pivot within a row to Causality view and Timeline views using the Open Card and Open Timeline actions respectively.

upvoted 0 times

...

Ty

6 months ago

I think you can pivot within a row to Causality view and Timeline views using the Open Card Only.

upvoted 0 times

...

Brynn

7 months ago

Hmm, I'm not sure. This feels like the kind of question where they're trying to trip us up with the wording. I might have to go with C just to be safe.

upvoted 0 times

...

Tonette

7 months ago

Hah, no kidding! It's like they're trying to trick us or something. *rolls eyes* But yeah, I think Option B is the way to go here.

upvoted 0 times

...

Avery

7 months ago

Agreed. Although, I have to say, these certification exams really do love their convoluted wording, don't they? *chuckles*

upvoted 0 times

...

Portia

7 months ago

Yeah, that makes sense to me. Although C also seems possible - maybe you can't actually pivot between those views directly, and you'd have to go through some other steps first.

upvoted 0 times

Elly

5 months ago

Yeah, that's what I thought too. It seems like the most logical way to pivot.

upvoted 0 times

...

Fidelia

6 months ago

Using the Open Card and Open Timeline actions respectively

upvoted 0 times

...

Jamey

7 months ago

Yeah, I'm leaning towards Option B as well. It seems to be the only one that directly addresses pivoting between the different views.

upvoted 0 times

...

Truman

7 months ago

Okay, so based on that, my guess would be that B is the right answer. You'd need to open the card to see the data, and then you'd be able to switch between the different views to investigate further.

upvoted 0 times

...

Honey

7 months ago

Hmm, yeah, that makes sense. So I'm thinking the answer is probably Option B. What do you all think?

upvoted 0 times

...

Alexis

7 months ago

Hmm, let me think this through. If I had to guess, I'd say 'pivoting within a row' probably means switching between different views of the same data, right? And the Causality and Timeline views are likely different visualizations or analysis modes.

upvoted 0 times

...