← Back to exam page

Free XSIAM-ENGINEER – Palo-Alto-Networks XSIAM-ENGINEER Practice Test Question

Loading demo links...

Showing 1–3 of 7 questions

Question 1 (Topic 1)

In which two locations can correlation rules be monitored for errors? (Choose two.)

Select an option, then click Submit answer.

  • ○ XDR Collector audit logs (type = Rules, subtype = Error)
  • ○ correlations_auditing dataset through XQL
  • ○ Management audit logs (type = Rules, subtype = Error)
  • ○ Alerts table as a health alert
Question 2 (Topic 1)

Which section of a parsing rule defines the newly created dataset?

Select an option, then click Submit answer.

  • ○ RULE
  • ○ COLLECT
  • ○ INGEST
  • ○ CONST
Question 3 (Topic 1)

Which step must be taken to enable Cloud Identity Engine on Cortex XSIAM?

Select an option, then click Submit answer.

  • ○ Enable SSO integration.
  • ○ Activate it in the Customer Support Portal.
  • ○ Activate it on HUB.
  • ○ Enable Active Directory log collection.