Palo Alto Networks PCDRA 考試大綱：

主題	簡介
主題 1	Investigation: This section of the exam measures the skills of Incident Response Specialists and involves using Cortex XDR for security investigations. Candidates must learn how to navigate the console, use remote terminal options, and distinguish between incidents and alerts.
主題 2	Threat Hunting: This section of the exam measures the skills of a Security Operations Analyst and covers proactive threat detection techniques. Candidates will learn about various tools, including Indicators of Compromise (IOC), Behavioral Indicators of Compromise (BIOC), and the XQL query language for threat hunting.
主題 3	Threats and Attacks: This section of the exam measures the skills of Cybersecurity Analysts and covers various attack types, including exploits, malware, file-less attacks, supply chain threats, and ransomware. Candidates must differentiate between threats and attacks while understanding how security modules identify risks. Recognizing attack tactics and understanding the MITRE framework are also key aspects of this section. One skill assessed is identifying legitimate threats versus false positives in security analysis.
主題 4	Prevention and Detection: This section of the exam measures the skills of Security Engineers and focuses on defense mechanisms against cyber threats. Candidates must understand ransomware defense systems, device management techniques, and methods to prevent agent-based attacks.
主題 5	Reporting: This section of the exam measures the skills of Security Analysts and evaluates the ability to generate and interpret security reports using Cortex XDR. Candidates must understand how to leverage reporting tools to provide insights into security incidents, system vulnerabilities, and attack trends.
主題 6	Architecture: This section of the exam measures the skills of a Security Operations Analyst and covers the structural components of Cortex XDR. Candidates must understand the role of the Cortex XDR Data Lake, Cortex Agent, and Cortex Console. The architecture of Cortex XDR across different operating systems is also explored, including how security functions vary between platforms.

參考：https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/education/pcdra-blueprint.pdf

Palo Alto Networks PCDRA 考試概覽:

認證廠商:	Palo Alto Networks
考試名稱:	Palo Alto Networks 認證偵測與回應分析師
考試代碼:	PCDRA
相關認證:	Palo Alto Networks 認證SOC分析師 (PCNSA) Palo Alto Networks 認證資安自動化工程師 (PCSAE)
支援語言:	英文
證照有效期限:	2年
實際考試題數:	60–75題
考試費用:	155美元
及格分數:	860分（分數範圍300–1000）
考試形式:	單選題, 配對題, 複選題, 情境式題目
考試時間:	80–90
推薦課程:	Cortex XDR 3：基礎介紹 Cortex XDR 3：攻擊事件回應
考試報名:	Pearson VUE 報名入口 Palo Alto Networks 認證入口網站
範例考題:	Palo Alto Networks PCDRA 範例考題
考試方式:	於Pearson VUE考場進行監考測驗；線上監考模式已於2025年5月終止
必備條件:	無強制先修資格；建議具備資訊安全基礎知識與Cortex XDR相關概念
官方大綱網址:	https://www.paloaltonetworks.com/services/education/palo-alto-networks-certified-detection-and-remediation-analyst