2.3 Configure Endpoint Groups XDR-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the impact of deleting an endpoint group in Cortex XDR?

   • AThe configuration policy assigned to the group is permanently deleted from the console
   • BThe endpoints in the group are not deleted, but they lose the configuration policy that was assigned to the group
   • CAll endpoints in the group are uninstalled from Cortex XDR
   • DThe endpoints are automatically moved to a new group with the same name
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which statement accurately describes how endpoint groups relate to agent configuration policies?

   • AConfiguration policies are applied directly to individual agents, and endpoint groups are only used for reporting purposes
   • BEndpoint groups determine which agent version is installed, while configuration policies control only the malware prevention settings
   • CEach endpoint group must have its own unique configuration policy that cannot be shared with any other group
   • DA configuration policy can be assigned to one or more endpoint groups, and the policy settings apply to all agents in those groups
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which endpoint attribute can be used as a criterion in a dynamic group rule?

   • AOperating system
   • BLast logged-in user's email address
   • CInstalled application version
   • DNetwork switch port number
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In the Cortex XDR console, where would an administrator navigate to create a new endpoint group?

   • AEndpoints → Endpoint Groups
   • BSettings → Agent Configuration
   • CInvestigation → Endpoint Groups
   • DAlerts → Endpoint Groups
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   A dynamic rule is configured to add endpoints with 'Windows' in the hostname to the 'Windows Servers' group. An endpoint named 'SRV-LINUX-01' is not being added. What is the most likely reason?

   • AThe hostname does not contain 'Windows', so it does not match the rule criteria
   • BThe endpoint is already a member of the group
   • CThe endpoint is not running a Windows operating system
   • DThe dynamic rule is disabled
   Reveal Solution Discussion Select an answer first