2.2 Configure Endpoint Extension Profiles and Policies XDR-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   After assigning an endpoint extension profile to a group, an administrator notices that some endpoints are still running a blocked extension. What is a likely cause of this issue?

   • AThe administrator forgot to enable the 'Block' action in the profile
   • BThe endpoints have not yet received the updated profile from the management plane
   • CThe extension is allowed by a different profile assigned to the same group
   • DThe endpoints are running an outdated version of the operating system
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How does an administrator apply an endpoint extension profile to a specific set of endpoints?

   • ABy manually installing the profile on each endpoint via a script
   • BBy assigning the profile to an endpoint group that contains those endpoints
   • CBy configuring the profile in the agent's local configuration file
   • DBy sending the profile to endpoints via email
   Reveal Solution Discussion Select an answer first
4. 13expert · medium

   An administrator has an endpoint extension profile 'Prod-Profile' assigned to the 'Production' group. They need to make a change to the profile to block a newly discovered malicious extension. However, they are concerned about the impact on endpoints that are currently offline. What is the best approach to ensure the change is applied to all endpoints?

   • AEdit the 'Prod-Profile' directly; the change will be applied to all endpoints when they next check in.
   • BClone the 'Prod-Profile', edit the clone, and assign the clone to the 'Production' group.
   • CWait until all endpoints are online, then edit the profile.
   • DCreate a new profile with the change and assign it to the 'Production' group, then delete the old profile.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   When creating a new endpoint extension profile in Cortex XDR, which of the following is a required initial step?

   • AProviding a unique name for the profile
   • BUploading a list of allowed extensions from a CSV file
   • CSelecting the endpoint group to assign the profile to
   • DEnabling the 'Block all extensions' option by default
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   An endpoint extension profile is assigned to an endpoint group. What happens to endpoints that are later added to this group?

   • AThey are excluded from the profile until the group is recreated
   • BThey receive the profile only after a full agent reinstall
   • CThey automatically receive and enforce the profile's settings
   • DThey require a manual profile assignment after joining the group
   Reveal Solution Discussion Select an answer first