Demonstrate Use of Fleet and Elastic Agents ELASTIC-CERTIFIED-SIEM-ANALYST Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A small company wants to manage a handful of Elastic Agents without setting up a dedicated Fleet Server. They already have an Elastic Cloud deployment. What should they do?

   • AUse standalone Elastic Agents without Fleet.
   • BInstall Elastic Agent on the Elastic Cloud deployment itself.
   • CUse the Fleet Server provided by Elastic Cloud to manage their agents.
   • DRun Fleet Server on a local VM and connect it to Elastic Cloud.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the role of an integration in an agent policy?

   • AIt adds a pre-configured data source, such as logs or metrics, to the policy.
   • BIt creates a new Elasticsearch index for storing the agent's metadata.
   • CIt replaces the agent's core functionality with a third-party tool.
   • DIt provides a backup mechanism for the agent's configuration files.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which statement best describes how Fleet centralizes agent management?

   • AIt only works with a single agent at a time, requiring separate configuration for each host.
   • BIt stores agent logs directly in Fleet instead of forwarding them to Elasticsearch.
   • CIt requires manual SSH access to each host to update agent configuration files.
   • DIt allows administrators to define agent policies once and apply them to many enrolled agents simultaneously.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of Fleet in the Elastic Stack?

   • ATo replace Kibana as the primary visualization tool for SIEM data.
   • BTo serve as the primary data storage engine for all Elasticsearch indices.
   • CTo act as a load balancer for distributing search queries across Elasticsearch nodes.
   • DTo provide a centralized UI and API for managing the lifecycle of Elastic Agents and their policies.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How are agent policies applied to enrolled agents?

   • ABy assigning the policy to one or more agents in the Fleet UI.
   • BBy restarting the Elasticsearch service on the Fleet Server.
   • CBy manually copying the policy file to each host's filesystem.
   • DBy sending a special email to the host administrator with the policy attached.
   Reveal Solution Discussion Select an answer first