3.4 Configure XDR Collectors XDR-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which operating system is supported for running an XDR Collector?

   • AUbuntu 18.04 LTS
   • BWindows Server 2016 or later
   • CmacOS 11 Big Sur
   • DCentOS 7
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An administrator is configuring an XDR Collector and wants to ensure it only collects logs from specific directories on the server. Which configuration setting should be used?

   • ADisable data collection and rely on manual log uploads.
   • BUse the collector's default configuration, which automatically detects all log sources.
   • CDefine custom log paths in the collector's data collection settings.
   • DSet the collector to collect all logs by default.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which setting is essential for an XDR Collector to connect to the Cortex XDR cloud?

   • AThe log retention period
   • BThe DNS server IP address
   • CThe registration token
   • DThe syslog server port
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   An organization has a mixed environment with Windows and Linux servers. They need to deploy XDR Collectors, but the Linux servers are in a DMZ with strict outbound firewall rules that only allow traffic to specific IP addresses. The Windows servers are on the internal network with a proxy. What is the best way to configure the collectors to ensure they can communicate with the XDR cloud?

   • AConfigure all collectors to use the same proxy settings, regardless of location.
   • BConfigure the Linux collectors to use a direct connection with allowed outbound IPs, and the Windows collectors to use the proxy.
   • CDisable the firewall for the DMZ to allow all outbound traffic.
   • DMove the Linux servers to the internal network to simplify configuration.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which statement accurately describes the relationship between an XDR Collector and the Cortex XDR cloud?

   • AThe collector stores all security data locally and only sends summaries to the cloud
   • BThe collector is a cloud-based service that ingests data directly from endpoints
   • CThe collector is a virtual appliance that replaces the need for endpoint agents
   • DThe collector is an on-premises component that securely forwards data to the Cortex XDR cloud for analysis
   Reveal Solution Discussion Select an answer first