Palo Alto Networks PCDRA Exam - Topic 6 Question 86 Discussion

Actual exam question for Palo Alto Networks's PCDRA exam

Question #: 86
Topic #: 6

[All PCDRA Questions]

What license would be required for ingesting external logs from various vendors?

ACortex XDR Pro per Endpoint

BCortex XDR Vendor Agnostic Pro

CCortex XDR Pro per TB

DCortex XDR Cloud per Host

Show Suggested Answer

Suggested Answer: C

To ingest external logs from various vendors, you need a Cortex XDR Pro per TB license. This license allows you to collect and analyze logs from Palo Alto Networks and third-party sources, such as firewalls, proxies, endpoints, cloud services, and more. You can use the Log Forwarding app to forward logs from the Logging Service to an external syslog receiver. The Cortex XDR Pro per Endpoint license only supports logs from Cortex XDR agents installed on endpoints. The Cortex XDR Vendor Agnostic Pro and Cortex XDR Cloud per Host licenses do not exist.Reference:

Features by Cortex XDR License Type

Log Forwarding App for Cortex XDR Analytics

SaaS Log Collection

by Denise at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium PCDRA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alyce

4 days ago

D. Cortex XDR Cloud per Host is the way to go. Cloud-based licensing is the future, and per-host pricing is more flexible.

upvoted 0 times

...

Harrison

9 days ago

C. Cortex XDR Pro per TB makes the most sense to me. Pricing based on data volume is common for this type of solution.

upvoted 0 times

...

Rodney

14 days ago

I think the answer is B. Cortex XDR Vendor Agnostic Pro seems like the right license for ingesting external logs from various vendors.

upvoted 0 times

...

Carissa

19 days ago

I feel like the Vendor Agnostic Pro could be the right choice since it mentions external logs, but I need to double-check my notes on that.

upvoted 0 times

...

Annamae

24 days ago

I'm a bit confused about the differences between the licenses. I thought the Cloud per Host might be relevant, but I’m not entirely sure.

upvoted 0 times

...

Vernice

29 days ago

I practiced a similar question last week, and I believe the answer was related to the amount of data ingested. Could it be the Cortex XDR Pro per TB?

upvoted 0 times

...

Trina

1 month ago

I think I remember something about needing a specific license for external logs, but I'm not sure if it's the Pro per TB or the Vendor Agnostic one.

upvoted 0 times

...

Ailene

1 month ago

Ah, this is a tricky one. I'll need to carefully read through the licensing options and think about which one would provide the functionality described in the question.

upvoted 0 times

...

Marget

1 month ago

Based on the question, I think the answer is likely B) Cortex XDR Vendor Agnostic Pro, since that sounds like it would cover ingesting logs from multiple vendors.

upvoted 0 times

...

Bong

2 months ago

I'm a bit confused by the options here. I'll need to review the Cortex XDR licensing details to determine which one is the right fit for this scenario.

upvoted 0 times

...

Kayleigh

2 months ago

Okay, let's see. I know Cortex XDR has different tiers, so I'll need to figure out which one covers ingesting external logs from various vendors.

upvoted 0 times

...

Linette

2 months ago

Hmm, this seems like a licensing question. I'll need to think carefully about the different Cortex XDR options and what they cover.

upvoted 0 times

...