3.3 Configure Broker VM Applets and Clusters XDR-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which tool is used to monitor the health and performance of Broker VM applet clusters?

   • AThe VMware vSphere client
   • BThe XDR console's Broker VM management page
   • CThe Palo Alto Networks firewall CLI
   • DThe Windows Event Viewer
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a primary benefit of clustering Broker VM applets?

   • AGuaranteed data loss prevention
   • BElimination of the need for a firewall
   • CSimplified licensing requirements
   • DIncreased data collection capacity and high availability
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   An organization is using a Broker VM to ingest logs from multiple sources, including Palo Alto Networks firewalls and Windows servers. The administrator has configured the Firewall applet and the Windows Event Log applet on the same Broker VM. Recently, they have noticed that the Broker VM is running out of memory, causing applets to crash. What is the most effective way to resolve this issue while maintaining the current ingestion capabilities?

   • AReduce the log source volume by filtering out less important logs from both applets.
   • BIncrease the memory of the Broker VM to accommodate the resource requirements of both applets.
   • CDisable the Windows Event Log applet and use the Syslog applet to collect Windows logs instead.
   • DDeploy a second Broker VM and move the Windows Event Log applet to it, creating a small cluster.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company is planning to ingest logs from a variety of sources, including Palo Alto Networks firewalls, Windows servers, and Linux servers. They have a limited number of Broker VM licenses and want to minimize the number of VMs deployed. What is the most efficient way to configure the Broker VM applets to handle all these sources?

   • AUse a single Syslog applet and configure all sources to send logs in syslog format.
   • BDeploy a separate Broker VM for each applet type to ensure isolation and performance.
   • CInstall all the required applets (Firewall, Windows Event Log, and Syslog) on a single Broker VM.
   • DDeploy a cluster of Broker VMs, with each node running a different applet type.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An administrator is setting up a cluster of Broker VM applets for the first time. The cluster will consist of three nodes. During the configuration, the administrator needs to specify the cluster parameters. Which of the following is a critical parameter that must be set correctly for the cluster to function?

   • AThe IP address of the primary node only, as secondary nodes will automatically sync.
   • BThe number of applets to run on each node, which must be identical across all nodes.
   • CThe DNS server settings for the cluster, which must be the same for all nodes.
   • DThe cluster name and the shared secret used for inter-node communication.
   Reveal Solution Discussion Select an answer first