Exam XSIAM-Analyst Topic 5 Question 110 Discussion
Actual exam question for Palo Alto Networks's XSIAM-Analyst exam
Question #: 110
Topic #: 5
Question #: 110
Topic #: 5
An on-demand malware scan of a Windows workstation using the Cortex XDR agent is successful and detects three malicious files. An analyst attempts further investigation of the files by right-clicking on the scan result, selecting "Additional data," then "View related alerts," but no alerts are reported.
What is the reason for this outcome?
What is the reason for this outcome?
Suggested Answer: B Vote an answer
The correct answer isB. The malware scan action detects malicious files but does not generate alerts for them.
In Cortex XSIAM and XDR, an on-demand malware scan effectively identifies malicious files on an endpoint. However, such scans typically record their findings directly in the scan results without generating separate alerts. Alerts are generally created through real-time protection mechanisms or detection rules, not through manually triggered scans.
Exact Reference from Official Document:
"The on-demand malware scan capability is designed to detect and identify malicious files but does not automatically generate alerts for those files. Alerts are primarily generated through real-time endpoint protection policies and detection rules." Therefore, the absence of alerts despite successful malware detection is due to the designed behavior of on- demand scans.
In Cortex XSIAM and XDR, an on-demand malware scan effectively identifies malicious files on an endpoint. However, such scans typically record their findings directly in the scan results without generating separate alerts. Alerts are generally created through real-time protection mechanisms or detection rules, not through manually triggered scans.
Exact Reference from Official Document:
"The on-demand malware scan capability is designed to detect and identify malicious files but does not automatically generate alerts for those files. Alerts are primarily generated through real-time endpoint protection policies and detection rules." Therefore, the absence of alerts despite successful malware detection is due to the designed behavior of on- demand scans.
by Ivan at Feb 25, 2026, 11:27 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).