Palo Alto Networks Palo Alto Networks Certifications PCDRA Questions & Answers

• Question 91:

  What is the function of WildFire for Cortex XDR?

  A. WildFire runs in the cloud and analyses alert data from the XDR agent to check for behavioural threats.

  B. WildFire is the engine that runs on the local agent and determines whether behavioural threats are occurring on the endpoint.

  C. WildFire accepts and analyses a sample to provide a verdict.

  D. WildFire runs entirely on the agent to quickly analyse samples and provide a verdict.

  Correct Answer: C

  Explanation: WildFire is a cloud-based service that accepts and analyses samples from various sources, including Cortex XDR, to provide a verdict of malware, benign, or grayware. WildFire also generates detailed analysis reports that show the behaviour and characteristics of the samples. Cortex XDR uses WildFire verdicts and reports to enhance its detection and prevention capabilities, as well as to provide more visibility and context into the threats. References: WildFire Analysis Concepts WildFire Overview