OpenExamsFREE PRACTICE — ANY EXAM

Palo Alto Networks XDR Analyst — Information & Free Practice

US · Examination information

100 free questions · Answer explanations · No signup required

Start free practice →

Palo Alto Networks XDR Analyst

Provider
Pearson Vue
Format
Multiple-choice questions; English
Time limit
90 minutes
Passing score
860 on a scale of 300 to 1000
Exam fee
$250 USD; price may vary by country and additional taxes or fees may apply
Examination outline
  • Alerting and Detection Processes (23%)
    • Identify and explain different types of alerts and alert sources
    • Explain the alert prioritization handling process
    • Explain the incident creation process
    • Explain the concepts of alert grouping and data stitching
  • Incident Handling and Response (34%)
    • Review and investigate alert evidence
    • Identify and analyze security events and incidents
    • Respond to incidents
    • Identify and explain exclusions and exceptions
  • Data Analysis (28%)
    • Use XQL to query datasets
    • Identify and explain components of XQL data structure
    • Identify and explain data query options
    • Use lookup tables
    • Identify, hunt, and investigate leads and indicators of compromise (IOCs)
    • Demonstrate understanding of Cortex XDR dashboards and reports
    • Identify and explain the data retention options in Cortex XDR
    • Explain the use of Host Insights information
  • Endpoint Security Management (15%)
    • Demonstrate understanding of endpoint prevention and extension profiles and policies
    • Identify and validate the impact of agent operational states
    • Identify and validate the impact of agent version and content update
Examination sources

Related license preparation

This examination may be required or accepted as an alternative, depending on the license and application pathway.