Smartly Prepare Exam with Free Online PCDRA Practice Test

We offer the latest PCDRA practice test designed for free and effective online Palo Alto Networks Certified Detection and Remediation Analyst certification preparation. It's a simulation of the real PCDRA exam experience, built to help you understand the structure, complexity, and topics you'll face on exam day.

Question 1

Phishing belongs which of the following MITRE ATT&CK tactics?

Options :

A : Initial Access, Persistence

B : Persistence, Command and Control

C : Reconnaissance, Persistence

D : Reconnaissance, Initial Access

Answer: D

Question 2

Which type of BIOC rule is currently available in Cortex XDR?

Options :

A : Threat Actor

B : Discovery

C : Network

D : Dropper

Answer: D

Question 3

Where would you go to add an exception to exclude a specific file hash from examination by the Malware profile for a Windows endpoint?

Options :

A : Find the Malware profile attached to the endpoint, Under Portable Executable and DLL Examination add the hash to the allow list

B : From the rules menu select new exception, fill out the criteria, choose the scope to apply it to, hit save.

C : Find the exceptions profile attached to the endpoint, under process exceptions select local analysis, paste the hash and save.

D : In the Action Center, choose Allow list, select new action, select add to allow list, add your hash to the list, and apply it.

Answer: B

Question 4

What is by far the most common tactic used by ransomware to shut down a victim’s operation?

Options :

A : preventing the victim from being able to access APIs to cripple infrastructure

B : denying traffic out of the victims network until payment is received

C : restricting access to administrative accounts to the victim

D : encrypting certain files to prevent access by the victim

Answer: D

Question 5

Which of the following is NOT a precanned script provided by Palo Alto Networks?

Options :

A : delete_file

B : quarantine_file

C : process_kill_name

D : list_directories

Answer: B