4.2 Configure Exceptions and Exclusions XDR-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   How does configuring an exclusion affect detection visibility in XDR?

   • AMatching events appear in detection views but are marked as excluded.
   • BMatching events appear in all views but with reduced severity.
   • CMatching events are not processed, so they do not appear in detection or alert views.
   • DMatching events appear in alert views but are automatically resolved.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which statement correctly describes the relationship between exceptions and exclusions in XDR detection configuration?

   • AExceptions affect alert generation, while exclusions affect data processing and detection.
   • BExclusions are a subset of exceptions and are configured in the same UI section.
   • CExceptions and exclusions are interchangeable terms for the same configuration setting.
   • DExceptions are applied before exclusions in the detection pipeline.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a valid attribute that can be used when configuring an exception in XDR?

   • AFirewall rule name
   • BSource IP address
   • CStorage account name
   • DDNS server address
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following can be specified as an exclusion criterion in XDR?

   • AA specific alert severity level
   • BA specific user role
   • CA specific endpoint hostname
   • DA specific dashboard widget
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When configuring an exception in Palo Alto Networks XDR, what is the primary purpose of defining criteria such as file hash, command line, or user?

   • ATo specify which detections should be ignored and not generate alerts.
   • BTo permanently delete the associated detection data from the XDR database.
   • CTo prevent the specified entities from being collected by the XDR agent.
   • DTo automatically remediate any endpoint that matches the criteria.
   Reveal Solution Discussion Select an answer first