1.4 Demonstrate Understanding of Data Retention and Compute Units XDR-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is experiencing a sudden increase in compute unit consumption. They have not changed their retention settings or their endpoint count. Upon investigation, they discover that a new application deployment is generating a much higher volume of network telemetry than expected. What is the most likely explanation for the increased compute unit consumption?

   • AThe new application is generating more alerts, and each alert consumes a fixed number of compute units.
   • BThe new application is consuming compute units directly because it is integrated with Cortex XDR.
   • CThe higher volume of ingested network telemetry requires more compute units for processing and storage.
   • DThe new application is causing the platform to run more frequent automatic scans, which consume compute units.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A security team is troubleshooting slow query performance in Cortex XDR. They have a 180-day retention period and a high volume of ingested data. They notice that queries against data older than 90 days are significantly slower than queries against recent data. They have sufficient compute units allocated. What is the most likely cause of the slowdown?

   • AThe retention period is too long, and Cortex XDR automatically throttles queries against data older than 90 days.
   • BThe compute units are being consumed by background indexing of the older data, leaving insufficient capacity for queries.
   • CThe large volume of retained data increases the amount of data that must be scanned for queries, even with sufficient compute units.
   • DOlder data is stored in a slower, archival storage tier that is only used when retention exceeds 90 days.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How does increasing the data retention period affect compute unit requirements?

   • AIt increases compute unit requirements due to more data being stored and processed
   • BIt decreases compute unit requirements because data is stored longer
   • CIt has no impact on compute unit requirements
   • DIt only affects storage capacity, not compute units
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is configuring Cortex XDR for the first time. They have a moderate data volume and want to ensure good performance without overspending. What is the best practice for their initial compute unit allocation?

   • AStart with the platform's recommended baseline for their expected data volume and monitor usage to adjust as needed.
   • BStart with the maximum compute units available to ensure the best possible performance from day one.
   • CStart with the minimum compute units and only increase them if performance issues are reported.
   • DStart with no compute units and rely on automatic scaling to allocate resources as data arrives.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How are compute units allocated in Palo Alto Networks XDR?

   • ABased on the number of active users in the organization
   • BBased on the number of firewalls deployed in the network
   • CBased on the storage capacity purchased by the customer
   • DBased on the volume of data ingested and the processing requirements
   Reveal Solution Discussion Select an answer first