Free Preparation Discussions
MENU
Palo Alto Networks PCDRA Exam - Topic 7 Question 57 Discussion
Topic #: 7
Under which conditions is Local Analysis evoked to evaluate a file before the file is allowed to run?
Local Analysis is a feature of Cortex XDR that allows the agent to evaluate files locally on the endpoint, without sending them to WildFire for analysis. Local Analysis is evoked when the following conditions are met:
The endpoint isdisconnectedfrom the internet or the Cortex XDR management console, and therefore cannot communicate with WildFire.
The verdict from WildFire is of a typeunknown, meaning that WildFire has not yet analyzed the file or has not reached a conclusive verdict.
Local Analysis uses machine learning models to assess the behavior and characteristics of the file and assign it a verdict of either benign, malware, or grayware. If the verdict is malware or grayware, the agent will block the file from running and report it to the Cortex XDR management console. If the verdict is benign, the agent will allow the file to run and report it to the Cortex XDR management console.Reference:
Local Analysis
WildFire File Verdicts
Alecia
3 months agoElke
3 months agoRodolfo
3 months agoCorrina
4 months agoHerman
4 months agoRonald
4 months agoJovita
4 months agoMarya
4 months agoMelissa
5 months agoGolda
5 months agoKrissy
5 months agoKattie
5 months agoHelene
5 months agoRex
5 months agoAzzie
5 months agoYolando
5 months agoLindsey
5 months agoMira
2 years agoVashti
1 year agoAlana
2 years agoCorazon
2 years agoDallas
2 years agoMicah
2 years agoMelda
2 years agoStefan
2 years agoTina
2 years agoSkye
2 years agoJerilyn
2 years agoAllene
2 years agoEladia
2 years agoLouvenia
2 years agoLayla
2 years agoDanica
2 years agoShawnda
2 years agoShawna
2 years agoShayne
2 years agoFrederica
2 years ago