4.3 Create Custom Dashboards and Reporting Templates XDR-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following can be customized in a reporting template?

   • AThe scheduled delivery time
   • BThe dashboard layout
   • CThe widget data source
   • DBranding, such as logo and colors
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A team lead has created a dashboard that is useful for the whole incident-response team. The lead wants to make it available to all team members so they can view it in their own dashboard lists, but does not want them to be able to modify the layout. What should the team lead do?

   • ADuplicate the dashboard and share the copy with the team.
   • BShare the dashboard with the team, granting view-only access.
   • CExport the dashboard and send the file to each team member.
   • DMove the dashboard to a shared folder and grant the team edit access to the folder.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An analyst has a reporting template for weekly threat summaries. The analyst needs to generate a report covering only the previous week's data for a specific business unit. What should the analyst do when generating the report?

   • AChange the template's default time range to the previous week and regenerate.
   • BSpecify the time range as the previous week and apply a filter for the business unit.
   • CGenerate the report without changing parameters, then manually edit the output.
   • DCreate a new template with the business unit filter embedded.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A SOC manager wants a daily report of the previous day's high-severity alerts to be delivered to the on-call analyst at 7:00 AM. The manager also wants a weekly summary of the same data to be delivered to the SOC lead every Monday. Both reports should use the same template structure. What is the most efficient way to configure this?

   • ACreate one scheduled report that runs weekly and manually generate the daily report each morning.
   • BCreate one scheduled report that runs daily and includes both the on-call analyst and the SOC lead as recipients.
   • CCreate two scheduled reports from the same template, one daily and one weekly, each with the appropriate time range and recipients.
   • DCreate two templates, one for the daily report and one for the weekly summary, and schedule each separately.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   An organization needs a daily report of all alerts from the previous day, delivered to the SOC team. The report must include the company logo and a custom footer. The SOC team also wants to receive a weekly summary of the same data, but with a different footer that includes the SOC manager's contact information. What should the administrator configure?

   • ACreate one template with a generic footer, and schedule both daily and weekly reports from it.
   • BCreate one template with the SOC manager's footer, and schedule both daily and weekly reports from it.
   • CCreate one template with the company logo and no footer, and add the footer manually to each report.
   • DCreate two templates with different footers, and schedule a daily report from one and a weekly report from the other.
   Reveal Solution Discussion Select an answer first