Palo Alto Networks XDR-Analyst Exam - Topic 3 Question 1 Discussion

Actual exam question for Palo Alto Networks's XDR-Analyst exam

Question #: 1
Topic #: 3

[All XDR-Analyst Questions]

What does the following output tell us?

AThere is one low severity incident.

BHost shpapy_win10 had the most vulnerabilities.

CThere is one informational severity alert.

DThis is an actual output of the Top 10 hosts with the most malware.

Show Suggested Answer

Suggested Answer: D

The output shows the top 10 hosts with the most malware in the last 30 days, based on the Cortex XDR data. The output is sorted by the number of incidents, with the host with the most incidents at the top. The output also shows the number of alerts, the number of endpoints, and the percentage of endpoints for each host. The output is generated by using the ACC (Application Command Center) feature of Cortex XDR, which provides a graphical representation of the network activity and threat landscape. The ACC allows you to view and analyze various widgets, such as the Top 10 hosts with the most malware, the Top 10 applications by bandwidth, the Top 10 threats by count, and more .

Use the ACC to Analyze Network Activity

Top 10 Hosts with the Most Malware

by Dominque at Dec 19, 2025, 06:19 AM

Limited Time Offer

25%

Off

Get Premium XDR-Analyst Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gabriele

6 days ago

Haha, "shpapy_win10"? Seriously, who names their host like that?

upvoted 0 times

...

Malcolm

11 days ago

A) There is one low severity incident. Seems pretty straightforward to me.

upvoted 0 times

...

Sophia

16 days ago

This looks like a joke, right? D) This is an actual output of the Top 10 hosts with the most malware.

upvoted 0 times

...

Frankie

21 days ago

B) Host shpapy_win10 had the most vulnerabilities.

upvoted 0 times

...

Sheron

26 days ago

I feel like option B is likely, but I need to double-check what the output actually shows regarding host vulnerabilities.

upvoted 0 times

...

Jesusa

1 month ago

I’m a bit confused; I thought the output was supposed to show malware, but I don’t see anything that clearly states that.

upvoted 0 times

...

Derick

1 month ago

I remember a similar question about severity levels, and I think option C could be correct since it mentions informational alerts.

upvoted 0 times

...

Ty

1 month ago

This looks like it could be a tricky one. I'll need to analyze the information in the image and really think through each of the answer choices to determine the best one.

upvoted 0 times

...

Devorah

2 months ago

I'm a bit confused by this question. The image doesn't seem to match the answer choices very well. I'll have to re-read everything closely to figure this out.

upvoted 0 times

...

Kristin

2 months ago

Okay, the image shows a list of hosts with vulnerabilities. I'm pretty sure the correct answer is B, since it mentions the host with the most vulnerabilities.

upvoted 0 times

...

Oretha

2 months ago

The image shows some kind of security alert or report, but I'm not sure exactly what it's telling us. I'll need to think through the options carefully.

upvoted 0 times

...