4.3 Create Custom Dashboards and Reporting Templates XDR-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An analyst is building a dashboard for the SOC manager. The manager wants to see the number of open incidents by severity, but only for incidents assigned to the 'Network' team. The analyst has already added a widget. What should the analyst do next to meet this requirement?

   • AChange the widget to use the Alerts data source and group by severity.
   • BAdd a second widget for the Network team and leave the first widget unchanged.
   • CConfigure the widget to use the Incidents data source, add a filter for the Network team, and group by severity.
   • DDuplicate the dashboard and apply the filter only on the duplicate.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the role of a content placeholder in a reporting template?

   • AIt sets the visualization type for a widget.
   • BIt stores the raw log data for the report.
   • CIt marks where data will be inserted when the report is generated.
   • DIt defines the email recipients for the report.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   An organization needs a weekly report of all incidents from the previous week. The report must be generated automatically and delivered to the security team. However, the security team wants to receive the report only if there were incidents during the week; if there were none, they do not want an empty report. What should the administrator configure?

   • AA manual report generation process that the administrator runs only when incidents exist.
   • BA template that automatically excludes empty sections, so the report is never empty.
   • CA scheduled report with a condition to skip delivery if the report contains no data.
   • DA scheduled report that always delivers, and the team ignores empty reports.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An organization wants a weekly executive summary report to be automatically generated every Monday at 8:00 AM and emailed to the executive team. What should the administrator configure?

   • AA reporting template with a weekly time range embedded in its structure.
   • BA dashboard with the executive summary widgets, shared with the executive team.
   • CA scheduled report using the executive summary template, set to run weekly on Monday at 8:00 AM with email delivery.
   • DA manual report generation process that the administrator runs every Monday.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A compliance officer needs a monthly report that always contains the same sections: an executive summary, a list of top alerts, and a detailed incident table. The officer wants to define this structure once and reuse it each month with different data. What should the officer create?

   • AA custom widget that combines all three data views into one visualization.
   • BA reporting template with sections for executive summary, top alerts, and incident details.
   • CA dashboard with widgets for executive summary, top alerts, and incident details.
   • DA scheduled report with a fixed time range of one month.
   Reveal Solution Discussion Select an answer first