What is the function of the Syslog applet in Broker VM?

To forward XDR alerts to external SIEM systems

To provide a command-line interface for troubleshooting

To manage the Broker VM's operating system updates

To collect syslog messages from network devices and forward them to XDR

A security administrator has deployed a cluster of Broker VM applets to handle log ingestion. After a few weeks, they notice that one of the nodes in the cluster is consistently using more CPU and memory than the others. What should the administrator do to troubleshoot this issue?

Increase the resources of the affected node to accommodate the higher load.

Immediately remove the node from the cluster and redeploy it, as this indicates a hardware failure.

Check the cluster monitoring dashboard to see if the load is being distributed evenly and investigate the specific applets running on the affected node.

Reboot the entire cluster to reset the load balancing algorithm.

An administrator is configuring a new Broker VM cluster. The cluster will consist of two nodes. The administrator has already installed the Broker VM software on both nodes. What is the next step in the cluster configuration process?

Configure the cluster parameters directly on the first node and then copy the configuration to the second node.

Register both nodes with the Cortex XDR cloud and then add them to the cluster from the Cortex XDR console.

Install a load balancer in front of the two nodes to distribute traffic before configuring the cluster.

Set up a shared storage location for the cluster to store logs before adding nodes.

What is a required step when adding a node to an existing Broker VM applet cluster?

Installing the Broker VM software on the new node

Reconfiguring all existing nodes

Deleting the existing cluster configuration

Palo Alto NetworksCertified XDR Engineer

Domain 3Objective 3

3.3 Configure Broker VM Applets and Clusters XDR-ENGINEER Practice Questions (Page 1)

Part of the Ingestion and Automation domain, which accounts for 22% of the XDR-ENGINEER exam.

27questions here

6free pages

6concepts

22%of the exam

Questions 1–5

1foundation · easy
What is the function of the Syslog applet in Broker VM?
Select an answer first
2application · medium
A security administrator has deployed a cluster of Broker VM applets to handle log ingestion. After a few weeks, they notice that one of the nodes in the cluster is consistently using more CPU and memory than the others. What should the administrator do to troubleshoot this issue?
Select an answer first
3foundation · easy
Which Broker VM applet is specifically designed to collect authentication events from directory services?
Select an answer first
4application · medium
An administrator is configuring a new Broker VM cluster. The cluster will consist of two nodes. The administrator has already installed the Broker VM software on both nodes. What is the next step in the cluster configuration process?
Select an answer first
5foundation · easy
What is a required step when adding a node to an existing Broker VM applet cluster?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XDR-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “XDR-ENGINEER” is a trademark of its owner, used for identification only.