4.1 Explain the Deployment and Configuration of XDR Agents (e.g., Virtual Machines VMs, Containers as a Service [CaaS], Serverless Functions, Kubernetes) CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a central management capability for XDR agents?

   • ARequiring agents to be configured on the same subnet as the console
   • BManually updating each agent's configuration file
   • CDisabling agent communication with the XDR service
   • DAssigning security policies to groups of agents
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When integrating an XDR agent with Kubernetes cluster security, what is a key benefit of using a sidecar container pattern?

   • AIt provides per-pod security monitoring and policy enforcement
   • BIt eliminates the need for Kubernetes RBAC
   • CIt reduces the number of containers in the cluster
   • DIt automatically patches application vulnerabilities
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In a Containers as a Service (CaaS) environment, how is an XDR agent typically deployed to secure container workloads?

   • AAs a sidecar container injected into each pod
   • BAs a separate virtual machine running alongside the container host
   • CBy embedding the agent code into each application container image
   • DAs a containerized agent deployed on the container host or orchestration platform
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company has a fleet of VMs that are deployed in a private cloud environment. The security team wants to deploy the XDR agent to these VMs. They need to ensure that the agent can communicate with the XDR cloud service, but the VMs do not have direct internet access. What should they do?

   • AConfigure the XDR agent to use a proxy server that has internet access.
   • BInstall the XDR agent on a separate VM that has internet access and configure it to monitor the other VMs.
   • CUse a VPN to connect the private cloud to the XDR cloud service.
   • DDisable the agent's communication and rely on local logs.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company runs a containerized application on Azure Container Instances (ACI) for a burst workload. The security team wants to monitor these containers with the XDR agent. They are concerned about the short-lived nature of the containers and the lack of persistent infrastructure. Which approach should they take?

   • AInstall the XDR agent on the underlying VM that hosts the ACI containers.
   • BUse the XDR agent's serverless integration to instrument the container image.
   • CRely on Azure Monitor logs and forward them to the XDR platform.
   • DDeploy the XDR agent as a sidecar container in the same container group as the application.
   Reveal Solution Discussion Select an answer first