Palo Alto Networks PCDRA Exam - Topic 6 Question 81 Discussion

Actual exam question for Palo Alto Networks's PCDRA exam

Question #: 81
Topic #: 6

[All PCDRA Questions]

How can you pivot within a row to Causality view and Timeline views for further investigate?

AUsing the Open Card Only

BUsing the Open Card and Open Timeline actions respectively

CYou can't pivot within a row to Causality view and Timeline views

DUsing Open Timeline Actions Only

Show Suggested Answer

Suggested Answer: B

To pivot within a row to Causality view and Timeline views for further investigation, you can use the Open Card and Open Timeline actions respectively. The Open Card action will open a new tab with the Causality view of the selected row, showing the causal chain of events that led to the alert. The Open Timeline action will open a new tab with the Timeline view of the selected row, showing the chronological sequence of events that occurred on the affected endpoint. These actions allow you to drill down into the details of each alert and understand the root cause and impact of the incident.Reference:

Cortex XDR User Guide, Chapter 9: Investigate Alerts, Section: Pivot to Causality View and Timeline View

PCDRA Study Guide, Section 3: Investigate and Respond to Alerts, Objective 3.1: Investigate alerts using the Causality view and Timeline view

by Nu at Aug 03, 2025, 03:37 PM

Limited Time Offer

25%

Off

Get Premium PCDRA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carlee

2 months ago

I feel like D is too limited, B makes more sense.

upvoted 0 times

...

Brett

2 months ago

Wait, are you sure? I thought you couldn't pivot at all!

upvoted 0 times

...

Sharika

2 months ago

Definitely agree with B, that's how I've always done it.

upvoted 0 times

...

Maurine

3 months ago

C seems wrong, you can pivot, right?

upvoted 0 times

...

Mauricio

3 months ago

I think it's B! Open Card and Open Timeline actions are key.

upvoted 0 times

...

Brynn

3 months ago

I think it’s definitely about using the Open Timeline actions, but I can't recall if that's the only thing needed.

upvoted 0 times

...

Ahmed

4 months ago

I’m pretty certain that you can’t pivot within a row to those views, but I might be mixing it up with another topic we covered.

upvoted 0 times

...

Xuan

4 months ago

I remember practicing a question similar to this, and I feel like the answer was about using the Open Card only, but that seems too simple.

upvoted 0 times

...

Cristy

4 months ago

I think we might need to use both the Open Card and Open Timeline actions to pivot effectively, but I'm not entirely sure.

upvoted 0 times

...

Ryan

4 months ago

I'm not sure about this one. The question seems a bit ambiguous to me. I could see arguments for both B and D being correct. I'll have to make an educated guess and move on.

upvoted 0 times

...

Rupert

4 months ago

Okay, I've got this. The answer is B - using the Open Card and Open Timeline actions respectively. That allows you to switch between the Causality view and Timeline view while staying within the same row. Nice and straightforward!

upvoted 0 times

...

Heike

5 months ago

Hmm, I'm a bit confused by the wording of this question. It's not totally clear to me what they mean by "pivot within a row" - does that mean I can switch between views without leaving the current row I'm looking at? I'll have to think this through carefully.

upvoted 0 times

...

Dortha

5 months ago

I think the key here is to look for the actions that allow you to pivot between the different views. The question mentions "Open Card" and "Open Timeline" actions, so those seem like the most relevant options.

upvoted 0 times

...