How do you apply an agent configuration policy to a specific set of endpoints in Cortex XDR?

Assign the policy to the endpoint group that contains those endpoints

Upload the policy to a shared network drive

Apply the policy directly to each endpoint's IP address

Send the policy to the endpoints via email

A company has a dynamic group rule that assigns endpoints with IP addresses in the 10.10.0.0/16 range to the 'Internal' group. After a network change, some endpoints now have IP addresses in the 10.20.0.0/16 range and are no longer being assigned to the 'Internal' group. The administrator wants to ensure these endpoints are still grouped correctly. What is the best solution?

Manually move each endpoint to the 'Internal' group.

Change the endpoints' hostnames to match the original rule.

Create a new dynamic group for the new IP range.

Update the dynamic rule to include the new IP range.

An administrator needs to remove an endpoint from a group because it was decommissioned. What is the correct action?

Uninstall the agent from the endpoint.

Delete the endpoint from the Cortex XDR console.

Edit the dynamic rule to exclude the endpoint.

Move the endpoint to the 'Ungrouped' group.

Which two methods can be used to add endpoints to a group in Cortex XDR?

Assigning a policy or installing a new agent

Manually selecting endpoints or using dynamic rules

Importing a CSV file or using an API call

Copying from another group or cloning an existing endpoint

An administrator needs to rename an existing endpoint group from 'OldName' to 'NewName'. What is the impact of renaming the group on the endpoints within it?

The endpoints will need to be re-added to the group.

The endpoints will lose their agent configuration policy.

The endpoints will be removed from the group.

The endpoints will remain in the group with the new name.

Palo Alto NetworksCertified XDR Engineer

Domain 2Objective 3

2.3 Configure Endpoint Groups XDR-ENGINEER Practice Questions (Page 1)

Part of the Cortex XDR Agent Configuration domain, which accounts for 22% of the XDR-ENGINEER exam.

23questions here

5free pages

8concepts

22%of the exam

Questions 1–5

1foundation · easy
How do you apply an agent configuration policy to a specific set of endpoints in Cortex XDR?
Select an answer first
2expert · hard
A company has a dynamic group rule that assigns endpoints with IP addresses in the 10.10.0.0/16 range to the 'Internal' group. After a network change, some endpoints now have IP addresses in the 10.20.0.0/16 range and are no longer being assigned to the 'Internal' group. The administrator wants to ensure these endpoints are still grouped correctly. What is the best solution?
Select an answer first
3application · medium
An administrator needs to remove an endpoint from a group because it was decommissioned. What is the correct action?
Select an answer first
4foundation · easy
Which two methods can be used to add endpoints to a group in Cortex XDR?
Select an answer first
5application · medium
An administrator needs to rename an existing endpoint group from 'OldName' to 'NewName'. What is the impact of renaming the group on the endpoints within it?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XDR-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “XDR-ENGINEER” is a trademark of its owner, used for identification only.