How does selecting a time range on a Cortex XDR dashboard affect the displayed data?

It limits the data shown to events that occurred within the selected period

It changes the time zone of the dashboard

It adjusts the dashboard layout to fit more widgets

It permanently deletes events older than the selected range

A security manager needs to share a weekly executive summary report with the CISO. The CISO prefers to receive the report as a PDF attachment in email. What should the manager configure?

Create a report, schedule it to run weekly, and set the delivery format to PDF with email recipients including the CISO.

Create a dashboard and export it to PDF manually each week.

Create a report and download it as a CSV file to email.

Create a report and share a link to it with the CISO.

An analyst is investigating a potential breach and needs to see all alerts from a specific endpoint over the past 48 hours. The analyst is on the 'Alert Management' dashboard. What should the analyst do first?

Click on the 'Alerts by Severity' widget to drill down into all alerts.

Open the 'Endpoint Management' dashboard and click on the endpoint.

Apply a filter for the endpoint name and set the time range to 'last 48 hours'.

Export the dashboard to PDF and review the alerts.

In Cortex XDR, what is the purpose of applying filters to a dashboard?

To change the color scheme of the dashboard

To permanently delete unwanted data from the system

To export the dashboard to a PDF file

To narrow the displayed data to specific criteria, such as severity or source

A junior analyst reports that they cannot see the 'Incident Management' dashboard that their team uses daily. The analyst has the 'Basic Analyst' role. What is the most likely reason for this?

The analyst is not connected to the correct network segment.

The analyst has not refreshed the browser page.

The dashboard is temporarily unavailable due to a system outage.

The analyst's role does not have permission to view that specific dashboard.

Palo Alto NetworksCertified XDR Analyst

Domain 3Objective 6

3.6 Demonstrate Understanding of Cortex XDR Dashboards and Reports XDR-ANALYST Practice Questions (Page 3)

Part of the Data Analysis domain, which accounts for 28% of the XDR-ANALYST exam.

27questions here

6free pages

7concepts

28%of the exam

Questions 11–15

11foundation · easy
How does selecting a time range on a Cortex XDR dashboard affect the displayed data?
Select an answer first
12application · medium
A security manager needs to share a weekly executive summary report with the CISO. The CISO prefers to receive the report as a PDF attachment in email. What should the manager configure?
Select an answer first
13application · medium
An analyst is investigating a potential breach and needs to see all alerts from a specific endpoint over the past 48 hours. The analyst is on the 'Alert Management' dashboard. What should the analyst do first?
Select an answer first
14foundation · easy
In Cortex XDR, what is the purpose of applying filters to a dashboard?
Select an answer first
15application · medium
A junior analyst reports that they cannot see the 'Incident Management' dashboard that their team uses daily. The analyst has the 'Basic Analyst' role. What is the most likely reason for this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XDR-ANALYST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “XDR-ANALYST” is a trademark of its owner, used for identification only.