Palo Alto Networks PCDRA Exam - Topic 12 Question 45 Discussion

Actual exam question for Palo Alto Networks's PCDRA exam

Question #: 45
Topic #: 12

What kind of malware uses encryption, data theft, denial of service, and possibly harassment to take advantage of a victim?

ARansomware

BWorm

CKeylogger

DRootkit

Show Suggested Answer

Suggested Answer: B

To pivot within a row to Causality view and Timeline views for further investigation, you can use the Open Card and Open Timeline actions respectively. The Open Card action will open a new tab with the Causality view of the selected row, showing the causal chain of events that led to the alert. The Open Timeline action will open a new tab with the Timeline view of the selected row, showing the chronological sequence of events that occurred on the affected endpoint. These actions allow you to drill down into the details of each alert and understand the root cause and impact of the incident.Reference:

Cortex XDR User Guide, Chapter 9: Investigate Alerts, Section: Pivot to Causality View and Timeline View

PCDRA Study Guide, Section 3: Investigate and Respond to Alerts, Objective 3.1: Investigate alerts using the Causality view and Timeline view

by Frederica at Dec 21, 2023, 05:48 AM

Limited Time Offer

25%

Off

Get Premium PCDRA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kallie

3 months ago

Keyloggers are sneaky, but they don’t encrypt files like ransomware.

upvoted 0 times

...

Celia

3 months ago

Wait, does ransomware really do harassment? Sounds extreme!

upvoted 0 times

...

Daisy

3 months ago

Ransomware is the right answer, no doubt about it.

upvoted 0 times

...

Rasheeda

4 months ago

I thought worms were the big threat these days?

upvoted 0 times

...

Shala

4 months ago

Definitely ransomware, it locks your files!

upvoted 0 times

...

Lachelle

4 months ago

I practiced a similar question, and I believe the answer is ransomware because it specifically targets victims for money through those methods.

upvoted 0 times

...

Josue

4 months ago

I’m a bit confused; I thought keyloggers were more about stealing information rather than using encryption.

upvoted 0 times

...

Ressie

4 months ago

I remember studying different types of malware, and I feel like ransomware fits the description best, especially with the harassment part.

upvoted 0 times

...

Pete

5 months ago

I think this might be ransomware since it involves encryption and data theft, but I'm not entirely sure.

upvoted 0 times

...

Gilberto

5 months ago

Based on the details provided, I think ransomware is the best fit. The use of encryption to hold data hostage, combined with data theft and denial of service, is a classic ransomware approach. I'll go with option A.

upvoted 0 times

...

Caren

5 months ago

I'm a bit confused on this one. The description mentions harassment, which doesn't seem to be a typical ransomware tactic. Maybe it's a different type of malware that I'm not as familiar with.

upvoted 0 times

...

Lashandra

5 months ago

Okay, let's see. Encryption, data theft, and denial of service - that sounds a lot like ransomware to me. I'm pretty confident that's the right answer.

upvoted 0 times

...

Maynard

5 months ago

Hmm, this one seems tricky. I'll need to think carefully about the key features of the different types of malware to determine which one best fits the description.

upvoted 0 times

...

Tresa

5 months ago

Hmm, this is a tough one. I'm torn between ransomware and rootkit. The harassment element makes me wonder if it could be a more advanced, multi-faceted attack. I'll have to weigh the options carefully before answering.

upvoted 0 times

...

Johnna

5 months ago

I think the answer is Session access controls, since the question specifically mentions requiring reauthentication every 8 hours.

upvoted 0 times

...

Dona

5 months ago

Hmm, this looks like a straightforward question about adding a user to an investigation in the Demisto War Room CLI. I think the answer is probably B, /invite Bob, since that seems like the most logical command to use.

upvoted 0 times

...

Moira

5 months ago

I feel like "Form Field Consistency Check" is more about input validation rather than restricting access. I'm leaning towards "URL Closure" for this one.

upvoted 0 times

...