4.1 Explain the Deployment and Configuration of XDR Agents (e.g., Virtual Machines VMs, Containers as a Service [CaaS], Serverless Functions, Kubernetes) CLOUD-SECURITY-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is migrating 200 Windows Server VMs from on-premises to Azure. The security team requires that the XDR agent be installed on each VM before it is connected to the production network. The VMs are provisioned using Azure Image Builder and deployed via Azure DevOps pipelines. The team wants to minimize manual steps and ensure the agent is present in every VM image. Which approach should the security team use?

   • AUse Azure Policy to deploy the XDR agent to all VMs after they are created, and rely on the policy evaluation to trigger installation before network access.
   • BAdd a step in the Azure DevOps pipeline that runs the XDR agent installer on each VM immediately after deployment, before the VM is released to the network.
   • CManually install the XDR agent on each VM via RDP after they are deployed, and then connect them to the production network.
   • DCreate a custom Azure Image Builder template that runs a script to install the XDR agent as part of the image build, then deploy VMs from that custom image.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is a common troubleshooting step when an XDR agent is not reporting to the console?

   • AChecking the agent's network connectivity to the XDR service
   • BDisabling the VM's firewall
   • CChanging the VM's public IP address
   • DIncreasing the VM's RAM
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a typical configuration option for XDR agents related to communication?

   • ASetting the frequency of heartbeat signals to the XDR service
   • BChoosing the agent's physical location
   • CDefining the agent's CPU architecture
   • DSelecting the agent's MAC address
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company uses Azure Functions for a serverless data-processing workload. The security team wants to monitor these functions with the XDR agent. They are concerned about the short-lived nature of serverless executions and the lack of persistent infrastructure. Which approach should they take to achieve visibility?

   • AInstall the XDR agent on the underlying VM that hosts the Azure Functions runtime.
   • BUse the XDR agent's serverless integration, which instruments the function code and sends telemetry to the XDR cloud.
   • CDeploy the XDR agent as a container in the same App Service plan as the Functions, and configure it to monitor the host.
   • DRely on Azure Monitor logs and forward them to the XDR platform without installing any agent.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a key integration point when deploying XDR agents in a CaaS environment?

   • AThe domain name system (DNS) server
   • BThe hypervisor's management console
   • CThe container orchestration platform's API
   • DThe cloud provider's billing system
   Reveal Solution Discussion Select an answer first