Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Palo Alto Networks XDR-Analyst Exam - Topic 4 Question 11 Discussion

How can you pivot within a row to Causality view and Timeline views for further investigate?
B) Using the Open Card and Open Timeline actions respectively
A) Using the Open Card Only
C) You can't pivot within a row to Causality view and Timeline views
D) Using Open Timeline Actions Only

Palo Alto Networks XDR-Analyst Exam - Topic 4 Question 11 Discussion

Actual exam question for Palo Alto Networks's XDR-Analyst exam
Question #: 11
Topic #: 4
[All XDR-Analyst Questions]

How can you pivot within a row to Causality view and Timeline views for further investigate?

Show Suggested Answer Hide Answer
Suggested Answer: B

To pivot within a row to Causality view and Timeline views for further investigation, you can use the Open Card and Open Timeline actions respectively. The Open Card action will open a new tab with the Causality view of the selected row, showing the causal chain of events that led to the alert. The Open Timeline action will open a new tab with the Timeline view of the selected row, showing the chronological sequence of events that occurred on the affected endpoint. These actions allow you to drill down into the details of each alert and understand the root cause and impact of the incident.Reference:

Cortex XDR User Guide, Chapter 9: Investigate Alerts, Section: Pivot to Causality View and Timeline View

PCDRA Study Guide, Section 3: Investigate and Respond to Alerts, Objective 3.1: Investigate alerts using the Causality view and Timeline view


Contribute your Thoughts:

0/2000 characters
Pamella
14 hours ago
Not sure about that, sounds too easy.
upvoted 0 times
...
Pok
6 days ago
Totally agree with B!
upvoted 0 times
...
Theodora
11 days ago
Wait, you can pivot like that?
upvoted 0 times
...
Stefania
16 days ago
I thought you could only use A?
upvoted 0 times
...
Barbra
21 days ago
B is the right answer!
upvoted 0 times
...
Hermila
26 days ago
A is too limited, B is the way to go.
upvoted 0 times
...
Valentin
1 month ago
C seems wrong, you definitely can pivot!
upvoted 0 times
...
Melvin
1 month ago
Wait, can you really pivot like that? Sounds tricky.
upvoted 0 times
...
Shala
1 month ago
Totally agree, B makes the most sense!
upvoted 0 times
...
Staci
2 months ago
I think it's B, you need both actions.
upvoted 0 times
...
Vallie
2 months ago
I think it's definitely A or B, but I can't recall the specifics of the Open Timeline actions. This is tricky!
upvoted 0 times
...
Lilli
2 months ago
I’m leaning towards C, but I remember discussing how you can use different actions to pivot. Maybe I’m mixing it up with another topic?
upvoted 0 times
...
Francene
2 months ago
I feel like the answer might be B, but I’m not entirely sure. We did a question on pivoting last week that was kind of like this.
upvoted 0 times
...
Tyra
4 months ago
I think we practiced something similar where we had to pivot views, but I can't remember if it was just the Open Card or both actions.
upvoted 0 times
...

Save Cancel