3.1 Explain the Process of Dashboard Creation and Configuration Using XQL CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security operations center wants to create a dashboard that combines data from firewall logs, endpoint detection alerts, and threat intelligence feeds into a single unified view. Which capability of XQL makes this possible?

   • AThe ability to create a new dataset by copying data from multiple sources.
   • BThe ability to schedule automated reports from each data source separately.
   • CThe ability to query multiple datasets and join or union them in a single query.
   • DThe ability to store all data in a single normalized table automatically.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A SOC analyst is creating a new dashboard. The analyst wants the dashboard to have a dark theme, a specific logo in the header, and a two-column layout. Where in the dashboard creation workflow are these settings configured?

   • AIn the 'Sharing' dialog when saving the dashboard.
   • BIn the XQL query of the first widget added to the dashboard.
   • CIn the user's personal profile settings.
   • DIn the dashboard's 'Settings' or 'Configuration' panel after the dashboard is created.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   An analyst is building a widget to show the number of alerts per severity level. The query `dataset = xdr_data | filter event_type = 'Alert' | stats count() as total by severity` returns a table with rows for 'low', 'medium', 'high', and 'critical'. The analyst wants the widget to display these categories in a specific order: critical, high, medium, low. How can this be achieved?

   • AAdd `| sort severity` to the query to sort alphabetically.
   • BChange the widget's visualization type to 'Pie Chart'.
   • CUse a `case` expression in the query to assign a numeric sort order to each severity.
   • DManually drag and drop the rows in the widget's configuration panel.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In XQL, which clause is used to filter results based on specific conditions?

   • ASELECT
   • BORDER BY
   • CFROM
   • DWHERE
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A senior analyst has created a comprehensive executive dashboard. The analyst wants to share it with the CISO, who needs to view it but should not be able to accidentally modify it. The CISO does not have an account in the Palo Alto Networks platform. What is the best way to share the dashboard?

   • AExport the dashboard as a PDF and email it to the CISO.
   • BShare the dashboard link publicly and send it to the CISO.
   • CClone the dashboard and share the clone with the CISO's email address.
   • DCreate a guest account for the CISO with 'Viewer' permissions.
   Reveal Solution Discussion Select an answer first