Exam XDR-Engineer Topic 1 Question 46 Discussion

Actual exam question for Palo Alto Networks's XDR-Engineer exam
Question #: 46
Topic #: 1
Based on the Malware profile image below, what happens when a new custom-developed application attempts to execute on an endpoint?

Suggested Answer: B Vote an answer

Based on the profile settings shown:
Action Mode: Block
Action when file is unknown to WildFire: Block
A new custom-developed application would be unknown to WildFire (no prior verdict exists for it).
With the "Action when file is unknown to WildFire" explicitly set to Block, the file will be prevented from executing.
Additionally, Upload unknown files to WildFire is Disabled, meaning the file won't even be submitted for analysis - it simply gets blocked with no detonation path.

by John at Jun 19, 2026, 12:18 AM

Limited Time Offer

15%

Off

Get Premium XDR-Engineer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10