A company ingests logs from different security products into Cortex XSIAM. After ingestion, they notice that the field 'user' in one source contains email addresses, while in another source it contains usernames. What is the best way to handle this discrepancy for consistent analysis?

Accept the inconsistency and manually correlate during analysis

Modify the source applications to output the same format

Use Cortex's normalization to map both to a common user field

Store the logs in separate data stores to avoid mixing formats

In the Cortex ingestion pipeline, what is the role of the processing stage?

To display the data to analysts

To delete data that is not needed

To normalize and enrich the data before storage

Which of the following is an example of telemetry data that can be ingested into Cortex?

CPU utilization metrics from a server

A configuration file for a firewall

An administrator is ingesting a CSV file into Cortex via direct upload, but the ingestion fails. What is a common cause of this failure?

The CSV file is stored in the cloud

The CSV file format does not match the expected schema

Palo Alto NetworksCertified Cloud Security Professional

Domain 2Objective 3

2.3 Demonstrate Understanding of Data Source Ingestion CLOUD-SECURITY-PROFESSIONAL Practice Questions (Page 5)

Part of the Cortex Fundamentals domain, which accounts for 15% of the CLOUD-SECURITY-PROFESSIONAL exam.

26questions here

6free pages

5concepts

15%of the exam

Questions 21–25

21application · medium
A company ingests logs from different security products into Cortex XSIAM. After ingestion, they notice that the field 'user' in one source contains email addresses, while in another source it contains usernames. What is the best way to handle this discrepancy for consistent analysis?
Select an answer first
22foundation · easy
In the Cortex ingestion pipeline, what is the role of the processing stage?
Select an answer first
23foundation · easy
Which of the following is an example of telemetry data that can be ingested into Cortex?
Select an answer first
24foundation · easy
An administrator is ingesting a CSV file into Cortex via direct upload, but the ingestion fails. What is a common cause of this failure?
Select an answer first
25foundation · easy
Which ingestion method is best suited for sending data from a custom application to Cortex using HTTP requests?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-SECURITY-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CLOUD-SECURITY-PROFESSIONAL” is a trademark of its owner, used for identification only.