New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Palo Alto Networks PCDRA Exam - Topic 10 Question 59 Discussion

Actual exam question for Palo Alto Networks's PCDRA exam
Question #: 59
Topic #: 10
[All PCDRA Questions]

Which of the following paths will successfully activate Remediation Suggestions?

Show Suggested Answer Hide Answer
Suggested Answer: B

Remediation Suggestions is a feature of Cortex XDR that provides you with recommended actions to remediate the root cause and impact of an incident. Remediation Suggestions are based on the analysis of the causality chain, the behavior of the malicious files or processes, and the best practices for incident response. Remediation Suggestions can help you to quickly and effectively contain and resolve an incident, as well as prevent future recurrence.

To activate Remediation Suggestions, you need to follow these steps:

In the Cortex XDR management console, go toIncidentsand select an incident that you want to remediate.

ClickCausality Viewto see the graphical representation of the causality chain of the incident.

ClickActionsand selectRemediation Suggestions. This will open a new window that shows the suggested actions for each node in the causality chain.

Review the suggested actions and select the ones that you want to apply. You can also edit or delete the suggested actions, or add your own custom actions.

ClickApplyto execute the selected actions on the affected endpoints. You can also schedule the actions to run at a later time or date.


Remediate Changes from Malicious Activity: This document explains how to use Remediation Suggestions to remediate the root cause and impact of an incident.

Causality View: This document describes how to use Causality View to investigate the causality chain of an incident.

Contribute your Thoughts:

0/2000 characters
Carolann
3 months ago
I agree, A is the most straightforward option!
upvoted 0 times
...
Enola
3 months ago
Wait, can D really activate it? That seems off.
upvoted 0 times
...
Herman
3 months ago
Definitely C, I've used it before.
upvoted 0 times
...
Wenona
4 months ago
I think B might work too, but not sure.
upvoted 0 times
...
Fredric
4 months ago
A is the correct path for that!
upvoted 0 times
...
Trevor
4 months ago
I’m leaning towards option D, right-clicking on an alert in the Alerts Table. It seems to match what I studied about accessing remediation tools.
upvoted 0 times
...
Marla
4 months ago
I’m a bit confused about the Causality View option. I feel like it could be a valid path, but I can't recall if it specifically leads to Remediation Suggestions.
upvoted 0 times
...
Ivory
4 months ago
I practiced a similar question, and I feel like the Alerts Table option might be correct, especially the one with right-clicking on a process node.
upvoted 0 times
...
Dominga
5 months ago
I think I remember that Remediation Suggestions can be accessed from the Incident View, but I'm not entirely sure if it's the right path.
upvoted 0 times
...
Venita
5 months ago
Okay, let me think this through step-by-step. The question is asking about the path to activate Remediation Suggestions, so I need to focus on the keywords in the options and visualize the workflow.
upvoted 0 times
...
Ruby
5 months ago
Hmm, I'm a bit unsure about this one. The options seem pretty similar, so I'll need to carefully read through each one to make sure I understand the differences.
upvoted 0 times
...
Cruz
5 months ago
I think the answer is D. The question specifically mentions the Alerts Table, and right-clicking on an alert seems like the most direct way to access the Remediation Suggestions.
upvoted 0 times
...
Lashonda
5 months ago
I'm pretty confident that the answer is D. The Alerts Table is where I would expect to find the Remediation Suggestions, and right-clicking on an alert seems like the most logical way to access them.
upvoted 0 times
...
Reita
5 months ago
Okay, I've got a strategy here. I'll focus on using a private sharing model to grant access based on the user hierarchy, and then manage the field-level access to hide the executive comments from the sales reps.
upvoted 0 times
...
Elmira
2 years ago
Remediation Suggestions? More like Remediation Confusion, am I right? But in all seriousness, I think D is the way to go.
upvoted 0 times
Colene
2 years ago
I think A might also work, have you tried that before?
upvoted 0 times
...
Leota
2 years ago
I agree, D seems like the most direct path to access Remediation Suggestions.
upvoted 0 times
...
...
Kristine
2 years ago
Hmm, I'm torn between C and D. Decisions, decisions. Maybe I'll just roll a dice to decide.
upvoted 0 times
Haydee
1 year ago
Why not try rolling a dice to decide between C and D?
upvoted 0 times
...
Alease
2 years ago
I believe C is the way to go for activating Remediation Suggestions.
upvoted 0 times
...
Wilda
2 years ago
I think D is the correct path to activate Remediation Suggestions.
upvoted 0 times
...
...
Cherelle
2 years ago
I think B) Causality View > Actions > Remediation Suggestions could be a possible path as well.
upvoted 0 times
...
Dottie
2 years ago
I'm not sure, but I think C) Alerts Table > Right-click on a process node > Remediation Suggestions might also work.
upvoted 0 times
...
Justine
2 years ago
I disagree, I believe the correct path is D) Alerts Table > Right-click on an alert > Remediation Suggestions.
upvoted 0 times
...
Edison
2 years ago
Hah, who needs Remediation Suggestions when you can just turn it all off and call it a day? But seriously, I'm going with D.
upvoted 0 times
...
Elmira
2 years ago
I think the correct path is A) Incident View > Actions > Remediation Suggestions.
upvoted 0 times
...
Thomasena
2 years ago
Wait, are we supposed to do this from the Alerts Table? I was thinking B - Causality View would be the way to go.
upvoted 0 times
Vi
1 year ago
Let's try D first and see if it works.
upvoted 0 times
...
Bong
1 year ago
I believe it's C, right-clicking on a process node.
upvoted 0 times
...
Fairy
2 years ago
I'm not sure, I was leaning towards A.
upvoted 0 times
...
Tambra
2 years ago
I believe C is the right way to activate Remediation Suggestions from the Alerts Table.
upvoted 0 times
...
Jaclyn
2 years ago
I think D is the correct path.
upvoted 0 times
...
Tonette
2 years ago
I usually go through Incident View to access Remediation Suggestions.
upvoted 0 times
...
Emmett
2 years ago
I think D is the correct path to activate Remediation Suggestions.
upvoted 0 times
...
...
Derick
2 years ago
I think D is the correct answer. Makes sense to access Remediation Suggestions from the Alerts Table.
upvoted 0 times
Rebbecca
2 years ago
I think A might also work, since it involves going through the Incident View.
upvoted 0 times
...
Jillian
2 years ago
I agree, D seems like the most logical choice.
upvoted 0 times
...
...

Save Cancel