Palo Alto Networks PCDRA Exam - Topic 1 Question 67 Discussion

Actual exam question for Palo Alto Networks's PCDRA exam

Question #: 67
Topic #: 1

Which function describes the removal of a specific file from its location on a local or removable drive to a protected folder to prevent the file from being executed?

ASearch & destroy

BIsolation

CQuarantine

DFlag for removal

Show Suggested Answer

Suggested Answer: C

The function that describes the removal of a specific file from its location on a local or removable drive to a protected folder to prevent the file from being executed isquarantine. Quarantine is a feature of Cortex XDR that allows you to isolate malicious or suspicious files from the endpoint and prevent them from running or spreading. You can quarantine files manually from the Cortex XDR console, or automatically based on the malware analysis profile or the remediation suggestions. When you quarantine a file, the Cortex XDR agent encrypts the file and moves it to a hidden folder under the agent installation directory. The file is also renamed with a random string and a .quarantine extension. You can view, restore, or delete the quarantined files from the Cortex XDR console.Reference:

Quarantine Files

Manage Quarantined Files

by Johnna at Sep 15, 2024, 04:09 PM

Limited Time Offer

25%

Off

Get Premium PCDRA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alisha

3 months ago

Really? I thought it was just called Isolation.

upvoted 0 times

...

Yuki

3 months ago

Quarantine is definitely the term used for this.

upvoted 0 times

...

Luisa

3 months ago

Wait, isn't it A? Search & destroy sounds right too.

upvoted 0 times

...

Selma

4 months ago

Totally agree, Quarantine makes sense!

upvoted 0 times

...

Jutta

4 months ago

I think the answer is C, Quarantine.

upvoted 0 times

...

Aleisha

4 months ago

"Flag for removal" doesn't seem right; I feel like that just marks it instead of actually moving it to a protected folder.

upvoted 0 times

...

Idella

4 months ago

I remember "quarantine" being used in the context of malware, but I can't recall if that's the exact term for moving files.

upvoted 0 times

...

Leonor

4 months ago

I'm not entirely sure, but "isolation" seems like it could fit too. We had a practice question about file protection, right?

upvoted 0 times

...

Tayna

5 months ago

I think the term "quarantine" sounds familiar, like when we discussed isolating files to prevent them from running.

upvoted 0 times

...

Patria

5 months ago

The key here is finding the function that describes the process of removing a file to a secure location. I think Quarantine is the answer.

upvoted 0 times

...

Charisse

5 months ago

I'm a bit confused by the wording of the question. Can someone explain what "protected folder" means in this context?

upvoted 0 times

...

Kandis

5 months ago

Okay, let me see... Quarantine sounds like the best option to prevent a file from being executed.

upvoted 0 times

...

Tomas

5 months ago

Hmm, I'm not totally sure about this one. I'll have to think it through carefully.

upvoted 0 times

...

Avery

5 months ago

This seems like a straightforward question about file security. I'm pretty confident I know the right answer.

upvoted 0 times

...

Alton

5 months ago

Hmm, this one's tricky. I'm not entirely confident about the differences between the SIP Server and Network SIP Server. I'll have to think this through carefully.

upvoted 0 times

...

Timmy

1 year ago

C) Quarantine is the way to go. Gotta keep those files in line, you know? Though I do wonder if 'flag for removal' would work in a pinch. Eh, better safe than sorry.

upvoted 0 times

...

Peggie

1 year ago

I'm going with C) Quarantine. Sounds like the best way to keep that file in check and out of trouble. Plus, it's fun to say 'quarantine' - it's like a secret agent operation!

upvoted 0 times