An administrator needs to rename an existing endpoint group. What is the correct approach?

Delete the group and create a new one with the desired name

The group name cannot be changed after creation

Rename the endpoints within the group to match the new group name

Edit the group's properties and change the name field

What happens to an endpoint when it is removed from an endpoint group?

It no longer receives the configuration policy that was assigned to that group

It is immediately uninstalled from the Cortex XDR agent

It is permanently deleted from the Cortex XDR console

It is automatically added to the default 'Ungrouped' group

An administrator wants to add a single specific endpoint to an existing group. What is the most direct way to accomplish this?

Change the endpoint's IP address to match the group's subnet

Create a dynamic rule based on the endpoint's hostname

Select the endpoint and add it to the group manually

Reinstall the agent on the endpoint

A security administrator notices that a few endpoints are in the wrong group after a recent reorganization. The endpoints should be in the 'Finance' group, but they are currently in the 'HR' group. What is the most efficient way to correct this?

Delete the endpoints from the HR group and reinstall the agent on each.

Use the 'Move to Group' action to move the endpoints from HR to Finance.

Edit the dynamic rule to change the group assignment for those endpoints.

Create a new group and add the endpoints to it.

An organization has two groups: 'Finance' and 'Engineering'. They want the 'Finance' group to have stricter data-loss prevention settings. What is the correct way to achieve this?

Change the global policy to be stricter for all endpoints

Apply the stricter settings directly to the endpoints in the 'Finance' group one by one

Move the 'Finance' endpoints to the 'Engineering' group and apply the stricter settings there

Create a separate configuration policy with stricter settings and assign it to the 'Finance' group

Palo Alto NetworksCertified XDR Engineer

Domain 2Objective 3

2.3 Configure Endpoint Groups XDR-ENGINEER Practice Questions (Page 2)

Part of the Cortex XDR Agent Configuration domain, which accounts for 22% of the XDR-ENGINEER exam.

23questions here

5free pages

8concepts

22%of the exam

Questions 6–10

6foundation · easy
An administrator needs to rename an existing endpoint group. What is the correct approach?
Select an answer first
7foundation · easy
What happens to an endpoint when it is removed from an endpoint group?
Select an answer first
8foundation · easy
An administrator wants to add a single specific endpoint to an existing group. What is the most direct way to accomplish this?
Select an answer first
9application · medium
A security administrator notices that a few endpoints are in the wrong group after a recent reorganization. The endpoints should be in the 'Finance' group, but they are currently in the 'HR' group. What is the most efficient way to correct this?
Select an answer first
10foundation · easy
An organization has two groups: 'Finance' and 'Engineering'. They want the 'Finance' group to have stricter data-loss prevention settings. What is the correct way to achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XDR-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “XDR-ENGINEER” is a trademark of its owner, used for identification only.