Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA) — Question 34

What license would be required for ingesting external logs from various vendors?

Answer options

• A. Cortex XDR Pro per Endpoint
• B. Cortex XDR Vendor Agnostic Pro
• C. Cortex XDR Pro per TB
• D. Cortex XDR Cloud per Host

Correct answer: C

Explanation

The Cortex XDR Pro per TB license is specifically designed for handling large volumes of data, such as logs from multiple vendors. The other options either pertain to endpoint protection or are limited to specific use cases that do not cover the ingestion of external logs.