2.1 Configure Endpoint Prevention Profiles and Policies XDR-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How does an endpoint policy enforce a prevention profile on managed endpoints in Cortex XDR?

   • AThe policy references the prevention profile, and the agent applies the profile's settings to the endpoint
   • BThe policy sends the prevention profile to the endpoint via email
   • CThe policy requires the administrator to manually install the prevention profile on each endpoint
   • DThe policy downloads the prevention profile to the endpoint only when a threat is detected
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An administrator has created a new prevention profile and wants to apply it to a group of Linux servers. The administrator has already created an endpoint policy for the Linux servers. What is the next step to enforce the new prevention profile on the Linux servers?

   • AInstall the prevention profile directly on each Linux server via the agent.
   • BAssign the new prevention profile to the Linux server endpoint policy.
   • CReboot the Linux servers to force them to download the new prevention profile.
   • DCreate a new endpoint group for the Linux servers and add the prevention profile to the group.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company has a global prevention profile that has been tuned over several months. A new regional office is being onboarded, and the local security team wants to make a few adjustments for their specific environment. The adjustments are minor, and the regional team wants to ensure they do not miss future updates to the global profile. What is the best approach?

   • AAssign the global prevention profile to the regional office's policy and use policy-level overrides for the adjustments.
   • BAsk the regional team to manually configure the adjustments on each endpoint after the global profile is applied.
   • CCreate a new prevention profile for the regional office that copies the global profile and apply the adjustments.
   • DModify the global prevention profile to include the regional adjustments and assign it to all policies.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is a component typically found within an endpoint prevention profile in Cortex XDR?

   • AFirewall rules
   • BAgent update settings
   • CMalware settings
   • DData loss prevention policies
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security administrator is configuring a prevention profile for a group of engineering workstations that run resource-intensive build tools. The administrator is concerned that enabling all prevention modules at maximum settings could slow down the build process. What is the recommended best practice to balance security and performance?

   • AEnable all prevention modules at maximum settings and monitor for performance issues.
   • BUse the same prevention profile as the rest of the organization without any adjustments.
   • CEnable the most critical prevention modules and test the build process in a staging environment to measure the performance impact.
   • DDisable all prevention modules on the engineering workstations to ensure build performance is not impacted.
   Reveal Solution Discussion Select an answer first