Learn how to add an exception for a digitally signed file in Cortex XDR to prevent the agent from blocking its execution. Follow our step-by-step guide to easily add the exception and ensure the file runs smoothly.
Table of Contents
Question
In Windows and macOS you need to prevent the Cortex XDR Agent from blocking execution of a file based on the digital signer. What is one way to add an exception for the singer?
A. In the Restrictions Profile, add the file name and path to the Executable Files allow list.
B. Create a new rule exception and use the singer as the characteristic.
C. Add the signer to the allow list in the malware profile.
D. Add the signer to the allow list under the action center page.
Answer
A. In the Restrictions Profile, add the file name and path to the Executable Files allow list.
Explanation
To add an exception for a digitally signed file in Cortex XDR, follow these steps:
- Navigate to the Cortex XDR web interface.
- Click on the “Policies” tab.
- Select the policy for which you want to add the exception.
- Click on the “Edit” button.
- Scroll down to the “Exceptions” section.
- Click on the “Add Exception” button.
- Select “File” from the drop-down menu.
- Enter the path and name of the digitally signed file you want to add an exception for.
- Click “Save”.
Therefore, the correct answer is A. In the Restrictions Profile, add the file name and path to the Executable Files allow list.
Palo Alto Networks Certified Detection and Remediation Analyst PCDRA certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Palo Alto Networks Certified Detection and Remediation Analyst PCDRA exam and earn Palo Alto Networks Certified Detection and Remediation Analyst PCDRA certification.