1.2 Explain the Deployment and Functionality of Cortex XDR Components XDR-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of integrating Cloud Identity Engine with Cortex XDR?

   • ATo provide cloud storage for logs
   • BTo replace the need for authentication on endpoints
   • CTo provide user and group information for identity-based security
   • DTo manage firewall rules
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of the Cortex XDR agent on an endpoint?

   • ATo provide a VPN connection for remote access
   • BTo manage network traffic routing
   • CTo replace the need for a firewall
   • DTo collect endpoint data and enforce security policies
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which type of data can the XDR Collector ingest?

   • AOnly network packet captures
   • BLogs from firewalls and servers
   • COnly endpoint agent data
   • DOnly cloud API calls
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What does the XDR Collector do with the data it ingests?

   • ADeletes it after analysis
   • BStores it locally for long-term retention
   • CEncrypts it and sends it to a third-party SIEM
   • DNormalizes and forwards it to Cortex XDR
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company has a high volume of logs from multiple sources and is concerned about the XDR Collector becoming a bottleneck. They also need to inspect network traffic. What is a best practice to ensure performance?

   • ADeploy multiple XDR Collectors to distribute the log ingestion load.
   • BUse the Broker VM to handle log ingestion instead of the XDR Collector.
   • CUse a single XDR Collector with a larger virtual machine size.
   • DSend all logs directly to Cortex XDR without a collector.
   Reveal Solution Discussion Select an answer first