Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA) — Question 20

An attacker tries to load dynamic libraries on macOS from an unsecure location. Which Cortex XDR module can prevent this attack?

Answer options

• A. DDL Security
• B. Hot Patch Protection
• C. Kernel Integrity Monitor (KIM)
• D. Dylib Hijacking

Correct answer: D

Explanation

The correct answer is Dylib Hijacking, as this module specifically addresses threats related to the loading of dynamic libraries from untrusted sources. The other options, while related to security, do not directly mitigate the specific risk of dylib hijacking on macOS.