Demonstrate Use of Fleet and Elastic Agents ELASTIC-CERTIFIED-SIEM-ANALYST Practice Questions (Page 6)

Questions 26–27

1. 26foundation · easy

   What does an agent status of 'Offline' in the Fleet UI typically indicate?

   • AThe agent's policy has been deleted.
   • BThe agent has not checked in with the Fleet Server within the expected time window.
   • CThe agent has been uninstalled from the host.
   • DThe agent is actively collecting data but not sending it.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the purpose of an agent policy in Fleet?

   • ATo act as a firewall rule set that controls network traffic on the host.
   • BTo provide a backup of the agent's binary files for disaster recovery.
   • CTo store the raw data collected by the agent before it is sent to Elasticsearch.
   • DTo define the configuration, inputs, and integrations that an enrolled agent should run.
   Reveal Solution Discussion Select an answer first