3.4 Configure XDR Collectors XDR-ENGINEER Practice Questions (Page 5)

Questions 21–24

1. 21expert · hard

   An organization has a security policy that requires all outbound traffic from servers to go through a proxy that performs SSL inspection. The proxy uses a custom CA certificate. When deploying XDR Collectors, the collectors fail to connect to the XDR cloud. What is the most likely cause and solution?

   • AThe collectors are not configured to use the proxy; configure the proxy settings in the collector.
   • BThe collectors are using the wrong port; change the collector port to 8080.
   • CThe collectors are not compatible with the proxy; use a different proxy.
   • DThe proxy's custom CA certificate is not trusted by the collectors; install the CA certificate on the collector hosts.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An organization is planning to install XDR Collectors on a set of legacy servers running an older version of Windows. Before installation, what should the administrator verify?

   • AThe servers have a TPM chip installed.
   • BThe servers are configured with a static IP address.
   • CThe servers meet the minimum supported OS version for the collector.
   • DThe servers have a minimum of 4 GB RAM.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   An administrator is managing multiple XDR Collectors and needs to identify which collectors are running an outdated version. The administrator wants to automate this check and receive alerts for any outdated collectors. What is the most efficient way to accomplish this?

   • ACheck the XDR console's collector management page for version information.
   • BManually log into each collector and check the version.
   • CEnable automatic updates for all collectors.
   • DUse the XDR API to query collector versions and set up a script to alert on outdated versions.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary role of an XDR Collector in the Palo Alto Networks XDR ecosystem?

   • ATo enforce security policies directly on endpoints and block malicious traffic
   • BTo provide a cloud-based dashboard for security analysts to view alerts
   • CTo replace the need for a SIEM by providing real-time correlation of all security events
   • DTo collect and forward security-relevant data from various sources to the Cortex XDR cloud
   Reveal Solution Discussion Select an answer first