Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA) — Question 7
Which of the following protection modules is checked first in the Cortex XDR Windows agent malware protection flow?
Answer options
- A. Hash Verdict Determination
- B. Behavioral Threat Protection
- C. Restriction Policy
- D. Child Process Protection
Correct answer: D
Explanation
Child Process Protection is the first module assessed in the Cortex XDR Windows agent's malware protection flow, allowing it to immediately detect and act on potentially harmful child processes. The other options, while important, are evaluated later in the protection sequence, making them less immediate in addressing threats.