exam questions

Exam PCDRA All Questions

View all questions & answers for the PCDRA exam

Exam PCDRA topic 1 question 79 discussion

Actual exam question from Palo Alto Networks's PCDRA
Question #: 79
Topic #: 1
[All PCDRA Questions]

What is the difference between presets and datasets in XQL?

  • A. A dataset is a Cortex data lake data source only; presets are built-in data source.
  • B. A dataset is a database; presets is a field.
  • C. A dataset is a built-in or third party source; presets group XDR data fields.
  • D. A dataset is a third-party data source; presets are built-in data source.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Chiquitabandita
10 months ago
Selected Answer: C
I agree with the link listed below
upvoted 1 times
...
MatchaLatte
10 months ago
Selected Answer: C
C https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-XQL-Language-Reference/Datasets-and-Presets Datasets - The standard, built-in data source that is available in every Cortex XDR instance is the xdr_data dataset.This dataset is comprised of both raw EDR events reported by the Cortex XDR agent, and of logs from different sources such as third-party logs. Presets - Presets offer groupings of xdr_data fields that are useful for analyzing specific areas of network and endpoint activity.
upvoted 2 times
danups
4 months, 1 week ago
I agree with "C" as the answer. Datasets can contain Cortex XDR data but also third-party data; presets are predefined configurations that help to simplify and standardize the process of creating reports and/or visualizations based on the data source (dataset)
upvoted 1 times
...
...
7e078ca
11 months, 3 weeks ago
Use preset to use a pre-defined datasets in which data is stored from console description Answer: D
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago