Online Access Free PCDRA Exam Questions

Live Terminal uses which type of protocol to communicate with the agent on the endpoint?

• A.TCP, over port 80
• B.NetBIOS over TCP
• C.WebSocket
• D.UDP and a random port

What kind of the threat typically encrypts user files?

• A.Zero-day exploits
• B.supply-chain attacks
• C.SQL injection attacks
• D.ransomware

What types of actions you can execute with live terminal session?

• A.Manage Processes, Manage Files, Run Operating System Commands, Run Ruby Commands and Scripts
• B.Manage Processes, Manage Files, Run Operating System Commands, Run Python Commands and Scripts
• C.Manage Network configurations, Quarantine Files, Run PowerShell scripts
• D.Apply patches, Reboot System, send notification for end user, Run Python Commands and Scripts

After scan, how does file quarantine function work on an endpoint?

• A.Quarantine takes ownership of the files and folders and prevents execution through access control.
• B.Quarantine removes a specific file from its location on a local or removable drive to a protected folder and prevents it from being executed.
• C.Quarantine disables the network adapters and locks down access preventing any communications with the endpoint.
• D.Quarantine prevents an endpoint from communicating with anything besides the listed exceptions in the agent profile and Cortex XDR.

Which Type of IOC can you define in Cortex XDR?

• A.full path
• B.destination port
• C.e-mail address
• D.App-ID