Palo Alto Networks Cybersecurity Entry-Level Technician (PCCET) — Question 64

What does Palo Alto Networks Cortex XDR do first when an endpoint is asked to run an executable?

Answer options

• A. run a static analysis
• B. check its execution policy
• C. send the executable to WildFire
• D. run a dynamic analysis

Correct answer: B

Explanation

The correct answer is B because Cortex XDR first checks the execution policy to determine if the executable is allowed to run based on predefined rules. The other options describe actions that may occur later in the process but are not the initial step taken by Cortex XDR.