4.1 Explain the Deployment and Configuration of XDR Agents (e.g., Virtual Machines VMs, Containers as a Service [CaaS], Serverless Functions, Kubernetes) CLOUD-SECURITY-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company uses AWS Lambda for a critical data-processing function. The security team wants to monitor the function with the XDR agent. They are concerned about the cold start latency and the impact on function performance. Which approach should they take to minimize performance impact while still gaining visibility?

   • AInstall the XDR agent on the underlying EC2 instance that runs the Lambda function.
   • BDeploy the XDR agent as a separate Lambda layer and attach it to the function.
   • CInstrument the function code with the XDR agent's serverless SDK and enable asynchronous telemetry reporting.
   • DUse AWS CloudWatch logs and forward them to the XDR platform.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   How can XDR monitoring be achieved for serverless functions when a traditional agent cannot be installed?

   • ABy requiring all functions to run on a dedicated VM
   • BBy installing an agent on the function's underlying container
   • CBy using a network tap on the function's virtual network
   • DBy collecting and analyzing function logs and events
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is a common method for updating XDR agents to a new version?

   • AReinstalling the operating system on each VM
   • BWaiting for the agent to update itself without any management
   • CPushing the update from the central management console
   • DDeleting and recreating all workloads
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which deployment pattern is commonly used to run an XDR agent on every node in a Kubernetes cluster?

   • ADaemonSet
   • BStatefulSet
   • CDeployment
   • DJob
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company has deployed the XDR agent to its VM fleet. The security team wants to ensure that the agents are logging the right amount of data without overwhelming the storage. They also want to be able to adjust the logging level without reinstalling the agent. What should they do?

   • AConfigure the logging level in the XDR console and push the settings to the agents.
   • BEdit the local configuration file on each VM to change the logging level.
   • CUse a third-party tool to monitor and adjust the agent's logging settings.
   • DReinstall the agent with a different logging configuration.
   Reveal Solution Discussion Select an answer first