3.3 Configure Broker VM Applets and Clusters XDR-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which configuration step is required to enable a Broker VM applet to forward data to the XDR service?

   • AProviding the XDR service URL and authentication credentials
   • BSetting the applet's time zone
   • CEnabling the applet's firewall rules
   • DAssigning a static IP address to the applet
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How does clustering Broker VM applets contribute to high availability?

   • ABy allowing another node to take over if one node fails
   • BBy automatically restarting failed applets
   • CBy storing data redundantly on each node
   • DBy providing a single point of failure
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A global company is deploying Broker VM applets to ingest logs from two separate data centers. Each data center has a high volume of logs. The security team wants to ensure high availability and scalability, but also wants to minimize the administrative overhead of managing multiple clusters. What is the most appropriate deployment strategy?

   • ADeploy a single Broker VM in each data center and use a load balancer to distribute the load between them.
   • BDeploy a single cluster with nodes in both data centers to provide a unified and highly available solution.
   • CDeploy two separate clusters, one in each data center, to keep the traffic local and reduce WAN dependency.
   • DDeploy a single cluster in one data center and forward all logs from the other data center over the WAN.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which statement accurately describes the relationship between Broker VM applets and the XDR service?

   • AApplets are only used for testing and do not send production data
   • BApplets are independent of the XDR service and only store data locally
   • CApplets require a direct internet connection from every data source to function
   • DApplets are managed by the XDR service and push data to it over an encrypted channel
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security team is configuring a Broker VM to ingest logs from a Palo Alto Networks firewall. The firewall is sending logs to the Broker VM, but the Cortex XDR cloud is not receiving them. The administrator has verified that the Broker VM is healthy and can reach the cloud. What is the most likely cause of the issue?

   • AThe Firewall applet is not installed or is not configured with the correct port and protocol to receive logs from the firewall.
   • BThe Broker VM is not connected to the same network segment as the firewall.
   • CThe firewall is not configured to send logs to the Broker VM's hostname instead of its IP address.
   • DThe Cortex XDR cloud is not configured to accept logs from this specific Broker VM.
   Reveal Solution Discussion Select an answer first