Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA) — Question 36

In incident-related widgets, how would you filter the display to only show incidents that were “starred”?

Answer options

• A. Create a custom XQL widget
• B. This is not currently supported
• C. Create a custom report and filter on starred incidents
• D. Click the star in the widget

Correct answer: D

Explanation

The correct answer is D, as clicking the star in the widget directly filters the displayed incidents to show only the starred ones. Options A and C suggest creating additional components which are unnecessary for this task, while option B incorrectly states that the functionality does not exist.