A security operations team needs to deploy XDR Collectors to 200 Windows endpoints across multiple remote offices. The team wants to ensure consistent configuration and minimize manual effort. Which deployment method should they use?

Manually install the collector on each endpoint using the installation wizard.

Download the collector installer to a shared network share and instruct users to run it themselves.

Install the collector on a single server and clone its disk image to all endpoints.

Use a software distribution tool to push the collector installer with a pre-configured response file.

A security team is deploying XDR Collectors to a fleet of servers that are provisioned using infrastructure-as-code. They want to automate the collector installation as part of the server build process. Which deployment method is most appropriate?

Create a golden image with the collector pre-installed and deploy it to all servers.

Manual installation via the GUI wizard on each server.

Use a configuration management tool to run the collector installer with silent flags.

Have users manually download and run the installer after the server is built.

Where can an administrator check the status of an XDR Collector?

In the Cortex XDR console under Collector Management

In the collector's local configuration file

In the Palo Alto Networks firewall's management interface

In the Windows Event Viewer on the collector server

A company is deploying an XDR Collector on a Windows server that sits behind a strict egress firewall. The security team wants to ensure the collector can reach the XDR cloud while minimizing the number of open firewall rules. Which configuration should the collector use?

Install the collector on a separate VLAN with no internet access and rely on the XDR cloud to pull data.

Configure a direct internet connection with no proxy and open all outbound ports to the XDR cloud.

Set the collector to use an HTTP proxy and configure the firewall to allow only the proxy's outbound traffic to the XDR cloud.

Disable the collector's proxy settings and use a VPN tunnel to the XDR cloud.

When configuring an XDR Collector to send data through a corporate proxy, which setting must be specified?

The proxy server's SSL certificate

The proxy server's hostname only

The proxy server address and port

Palo Alto NetworksCertified XDR Engineer

Domain 3Objective 4

3.4 Configure XDR Collectors XDR-ENGINEER Practice Questions (Page 3)

Part of the Ingestion and Automation domain, which accounts for 22% of the XDR-ENGINEER exam.

24questions here

5free pages

5concepts

22%of the exam

Questions 11–15

11application · medium
A security operations team needs to deploy XDR Collectors to 200 Windows endpoints across multiple remote offices. The team wants to ensure consistent configuration and minimize manual effort. Which deployment method should they use?
Select an answer first
12application · medium
A security team is deploying XDR Collectors to a fleet of servers that are provisioned using infrastructure-as-code. They want to automate the collector installation as part of the server build process. Which deployment method is most appropriate?
Select an answer first
13foundation · easy
Where can an administrator check the status of an XDR Collector?
Select an answer first
14application · medium
A company is deploying an XDR Collector on a Windows server that sits behind a strict egress firewall. The security team wants to ensure the collector can reach the XDR cloud while minimizing the number of open firewall rules. Which configuration should the collector use?
Select an answer first
15foundation · easy
When configuring an XDR Collector to send data through a corporate proxy, which setting must be specified?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XDR-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “XDR-ENGINEER” is a trademark of its owner, used for identification only.