3.3 Configure Broker VM Applets and Clusters XDR-ENGINEER Practice Questions (Page 6)

Questions 26–27

1. 26application · medium

   An organization is planning to ingest Windows Event Logs from a fleet of domain controllers. They have a single Broker VM deployed in their environment. The security administrator needs to ensure that the collected events are forwarded to the Cortex XDR cloud for analysis. Which applet should be installed and configured on the Broker VM?

   • ABroker VM applet, configured to use the built-in Windows Event Log collector feature.
   • BSyslog applet, configured to receive Windows Event Logs converted to syslog format by a third-party tool.
   • CFirewall applet, configured to collect logs from the domain controllers' built-in firewall.
   • DWindows Event Log applet, configured with the domain controllers as the source and the Cortex XDR cloud as the destination.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary role of a Broker VM applet in the Palo Alto Networks XDR environment?

   • ATo collect data from various sources and forward it to the XDR service for analysis
   • BTo store all XDR data locally for long-term retention
   • CTo replace the need for a firewall by providing inline traffic inspection
   • DTo provide a web-based interface for managing XDR alerts and incidents
   Reveal Solution Discussion Select an answer first