3.3 Configure Broker VM Applets and Clusters XDR-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which parameter is typically configured when setting up a Broker VM applet cluster?

   • AThe DNS server for the applets
   • BThe number of nodes in the cluster
   • CThe default gateway of the XDR service
   • DThe color of the VM icons
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When configuring a Broker VM applet, which setting is essential for the applet to receive data from a source?

   • AThe applet's display name
   • BThe listening port and protocol
   • CThe Broker VM's IP address
   • DThe XDR tenant ID
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is using a Broker VM to forward logs from a Linux server to Cortex XDR. The Linux server is configured to send syslog data to the Broker VM. The administrator wants to ensure that the logs are forwarded to the cloud even if the Broker VM loses connectivity to the Cortex XDR cloud for a short period. What should the administrator configure?

   • AThe Syslog applet's buffering and queueing settings to store logs locally during a cloud connectivity outage.
   • BThe Linux server to store logs locally for a longer period before sending them to the Broker VM.
   • CA second Broker VM in a different location to act as a backup, and configure the Linux server to send logs to both.
   • DThe Cortex XDR cloud to accept logs from an alternative source during an outage.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An organization is deploying a Broker VM cluster to handle a large volume of logs. The cluster will have four nodes. The administrator wants to ensure that if one node fails, the other nodes will automatically take over the workload without manual intervention. What is the key benefit of the cluster that enables this?

   • AScalability, which allows the cluster to handle more logs by adding more nodes.
   • BHigh availability, which allows the remaining nodes to automatically handle the workload of a failed node.
   • CCentralized management, which allows the administrator to manage all nodes from a single interface.
   • DLoad balancing, which distributes the workload evenly across all nodes at all times.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A large enterprise is experiencing a high volume of logs from multiple sources, and a single Broker VM is struggling to keep up, causing ingestion delays. The security team needs to ensure continuous log collection and avoid a single point of failure. What should the administrator implement?

   • AA load balancer in front of the Broker VM to distribute logs to multiple applets on the same VM.
   • BA cluster of Broker VM applets to distribute the load and provide high availability.
   • CA more powerful single Broker VM with additional CPU and memory resources.
   • DA second standalone Broker VM to handle the additional load, with no coordination between them.
   Reveal Solution Discussion Select an answer first