2.2 Configure Endpoint Extension Profiles and Policies XDR-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In Cortex XDR, what role do endpoint extension profiles play relative to endpoint groups?

   • AThey define the security policies that are applied to all endpoints in a group
   • BThey control the installation order of the agent on endpoints
   • CThey determine which endpoints are allowed to join a specific group
   • DThey replace the need for individual endpoint security policies
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company has two endpoint groups: 'Sales' and 'Engineering'. The 'Sales' group uses a profile that allows all extensions, while the 'Engineering' group uses a profile that blocks unsigned extensions. The administrator wants to create a new group 'Executives' that should have the same extension policy as 'Sales'. What is the most efficient way to achieve this?

   • AAssign the existing 'Sales' profile to the 'Executives' group.
   • BEdit the 'Engineering' profile to match 'Sales' and assign it to 'Executives'.
   • CCreate a new profile for 'Executives' with the same settings as 'Sales' and assign it to the group.
   • DClone the 'Sales' profile, assign the clone to 'Executives', and then delete the original 'Sales' profile.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   An endpoint is not enforcing the settings from its assigned extension profile. What is the first step an administrator should take to troubleshoot this issue?

   • AReinstall the Cortex XDR agent on the endpoint
   • BVerify that the endpoint is a member of the correct endpoint group
   • CCreate a new endpoint extension profile with the same settings
   • DDisable the endpoint's firewall to allow policy updates
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the effect of cloning an existing endpoint extension profile in Cortex XDR?

   • ADeletes the original profile and creates a new one with default settings
   • BUpdates the original profile with the latest extension definitions
   • CMoves the profile to a different endpoint group
   • DCreates a new profile with the same settings as the original
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company wants to block a specific malicious extension that is known to be signed by a legitimate certificate. The extension is currently allowed because it is signed. What setting should the administrator configure in the endpoint extension profile to block this specific extension?

   • ASet the browser to 'Block all extensions' and then add the legitimate extensions to the allowed list.
   • BAdd the certificate used to sign the extension to the blocked certificates list.
   • CSet the browser to 'Block unsigned extensions'.
   • DAdd the extension to the blocked extensions list in the profile.
   Reveal Solution Discussion Select an answer first