U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Palo Alto Networks XDR-Analyst Exam - Topic 3 Question 1 Discussion

Actual exam question for Palo Alto Networks's XDR-Analyst exam

Question #: 1
Topic #: 3

[All XDR-Analyst Questions]

What does the following output tell us?

AThere is one low severity incident.

BHost shpapy_win10 had the most vulnerabilities.

CThere is one informational severity alert.

DThis is an actual output of the Top 10 hosts with the most malware.

Show Suggested Answer

Suggested Answer: D

The output shows the top 10 hosts with the most malware in the last 30 days, based on the Cortex XDR data. The output is sorted by the number of incidents, with the host with the most incidents at the top. The output also shows the number of alerts, the number of endpoints, and the percentage of endpoints for each host. The output is generated by using the ACC (Application Command Center) feature of Cortex XDR, which provides a graphical representation of the network activity and threat landscape. The ACC allows you to view and analyze various widgets, such as the Top 10 hosts with the most malware, the Top 10 applications by bandwidth, the Top 10 threats by count, and more .

Use the ACC to Analyze Network Activity

Top 10 Hosts with the Most Malware

by Dominque at Dec 19, 2025, 06:19 AM

Limited Time Offer

25%

Off

Get Premium XDR-Analyst Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kathrine

2 months ago

Overall, B feels strongest. Clear evidence of vulnerabilities.

upvoted 0 times

...

Jacklyn

2 months ago

D seems off. It's not about malware directly.

upvoted 0 times

...

Claribel

2 months ago

C could be valid too. Informational alerts matter.

upvoted 0 times

...

Stephaine

2 months ago

But what about A? One low severity incident is also key.

upvoted 0 times

...

Jose

2 months ago

I agree, B makes sense. Most vulnerabilities there.

upvoted 0 times

...

Stanford

2 months ago

I think it's B. Host shpapy_win10 stands out.

upvoted 0 times

...

Richelle

3 months ago

This doesn’t look like a malware report to me.

upvoted 0 times

...

Lauran

3 months ago

I think the informational alert is more significant.

upvoted 0 times

...

Carman

3 months ago

Wait, is that really the most vulnerabilities?

upvoted 0 times

...

Bonita

3 months ago

Totally agree, that’s what it shows!

upvoted 0 times

...

Elroy

3 months ago

There is one low severity incident.

upvoted 0 times

...

Gabriele

4 months ago

Haha, "shpapy_win10"? Seriously, who names their host like that?

upvoted 0 times

...

Malcolm

4 months ago

A) There is one low severity incident. Seems pretty straightforward to me.

upvoted 0 times

...

Sophia

4 months ago

This looks like a joke, right? D) This is an actual output of the Top 10 hosts with the most malware.

upvoted 0 times

...

Frankie

5 months ago

B) Host shpapy_win10 had the most vulnerabilities.

upvoted 0 times

...

Sheron

5 months ago

I feel like option B is likely, but I need to double-check what the output actually shows regarding host vulnerabilities.

upvoted 0 times

...

Jesusa

5 months ago

I’m a bit confused; I thought the output was supposed to show malware, but I don’t see anything that clearly states that.

upvoted 0 times

...

Derick

5 months ago

I remember a similar question about severity levels, and I think option C could be correct since it mentions informational alerts.

upvoted 0 times

...

Ty

5 months ago

This looks like it could be a tricky one. I'll need to analyze the information in the image and really think through each of the answer choices to determine the best one.

upvoted 0 times

...

Devorah

5 months ago

I'm a bit confused by this question. The image doesn't seem to match the answer choices very well. I'll have to re-read everything closely to figure this out.

upvoted 0 times

...

Kristin

6 months ago

Okay, the image shows a list of hosts with vulnerabilities. I'm pretty sure the correct answer is B, since it mentions the host with the most vulnerabilities.

upvoted 0 times

...

Oretha

6 months ago

The image shows some kind of security alert or report, but I'm not sure exactly what it's telling us. I'll need to think through the options carefully.

upvoted 0 times

...

Mignon

6 months ago

Hmm, this looks like a vulnerability report. I'd carefully read through the options and compare them to the information provided in the image.

upvoted 0 times

...

Lucille

6 months ago

C) There is one informational severity alert.

upvoted 0 times

Shad

1 month ago

I think it’s definitely C.

upvoted 0 times

...

...

Karan

6 months ago

I think the output might indicate the number of vulnerabilities, but I'm not entirely sure which option it points to.

upvoted 0 times

...