Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA) — Question 32

In Windows and macOS you need to prevent the Cortex XDR Agent from blocking execution of a file based on the digital signer. What is one way to add an exception for the singer?

Answer options

• A. In the Restrictions Profile, add the file name and path to the Executable Files allow list.
• B. Create a new rule exception and use the singer as the characteristic.
• C. Add the signer to the allow list in the malware profile.
• D. Add the signer to the allow list under the action center page.

Correct answer: C

Explanation

Answer C is correct because adding the signer to the allow list in the malware profile specifically addresses the issue of execution blockage by the Cortex XDR Agent. The other options do not directly manage the signer in the context of malware protection, making them less suitable for this situation.