← Back to exam page

Free XSIAM-ENGINEER – Palo-Alto-Networks XSIAM-ENGINEER Practice Test Question

Loading demo links...

Showing 4–6 of 7 questions

Question 4 (Topic 1)

Which types of content may be included in a Marketplace content pack?

Select an option, then click Submit answer.

  • ○ Integrations, playbooks, parsers, and server configuration keys
  • ○ Predefined dashboards, indicators, and reports
  • ○ Scripts, playbooks, integrations, and correlation rules
  • ○ Behavioral indicator of compromise (BIOC) rules, layouts, and custom dashboards
Question 5 (Topic 1)

A Cortex XSIAM engineer plans to add Kafka and Syslog Collectors to a Broker VM cluster. What are two expected behaviors of the applets when they are added to the cluster? (Choose two.)

Select an option, then click Submit answer.

  • ○ Syslog Collector applet is automatically initiated, enters an active state on the primary node, and is on standby on the standby nodes.
  • ○ Kafka Collector applet is automatically initiated, enters an active state on the primary node, and is on standby on the standby nodes.
  • ○ Syslog Collector applet is active on all cluster nodes, including primary and standby.
  • ○ Kafka Collector applet is active on all cluster nodes, including primary and standby.
Question 6 (Topic 1)

A Cortex XDR agent is installed on an endpoint, but the agent is unable to download content updates and has not registered with the Cortex XSIAM server. An engineer troubleshoots the network connection and determines that, by design, this endpoint does not have direct internet access to the required network destinations for the Cortex XDR agent traffic. A Broker VM that has the local agent settings applet enabled with Agent Proxy configured is reachable by the endpoint. The Broker VM details are as follows: FQDN: crtxbroker01.company.net - Proxy listening port: 8888 - How should the engineer configure the Cortex XDR agent to use the existing Broker VM as a proxy for the agent network traffic?

Select an option, then click Submit answer.

  • ○ cytool proxy set "crtxbroker01. company.net: 8888"
  • ○ cytool config proxy --host crtxbroker01.company.net --port 8888
  • ○ cytool set proxy --host crtxbroker01.company.net --port 8888
  • ○ cytool proxy config "crtxbroker01.company.net:8888"