Palo Alto Networks Exam PSE-Cortex Topic 5 Question 81 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam

Question #: 81
Topic #: 5

An adversary attempts to communicate with malware running on a network in order to control malware activities or to exfiltrate data from the network.

Which Cortex XDR Analytics alert will this activity most likely trigger?

Auncommon local scheduled task creation

Bmalware

Cnew administrative behavior

DDNS Tunneling

Show Suggested Answer

Suggested Answer: D

by Felix at Jul 08, 2025, 05:53 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

2 days ago

C. new administrative behavior, for sure. Gotta keep an eye on those admin privileges, am I right?

upvoted 0 times

...

4 days ago

I'm gonna go with B. malware. That just seems like the obvious choice here.

upvoted 0 times

...

7 days ago

Hmm, I think the answer is D. DNS Tunneling seems like the most likely activity to trigger that alert.

upvoted 0 times

16 hours ago

A) uncommon local scheduled task creation

upvoted 0 times

...

12 days ago

I think the answer is D) DNS Tunneling.

upvoted 0 times

...