1.2 Explain the Deployment and Functionality of Cortex XDR Components XDR-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company uses Active Directory for user authentication and wants Cortex XDR to display usernames instead of IP addresses in alerts. They have deployed Cloud Identity Engine. What must they do to achieve this?

   • AInstall the Cortex XDR agent on the domain controllers to capture user logins.
   • BManually create user accounts in the Cortex XDR console for each employee.
   • CUse the XDR Collector to ingest Active Directory logs and map them to usernames.
   • DConfigure Cloud Identity Engine to sync users and groups from Active Directory to Cortex XDR.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a key configuration requirement for the Broker VM?

   • AIt must be configured with a static IP address for all deployments
   • BIt must have access to the network segments it monitors
   • CIt must be installed on the same host as the Cortex XDR agent
   • DIt requires a public IP address to communicate with endpoints
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which directory service can Cloud Identity Engine integrate with?

   • ABroker VM configuration
   • BLocal Linux user database
   • CCortex XDR agent database
   • DMicrosoft Active Directory
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the XDR Collector used for?

   • ATo manage user identities
   • BTo replace the Broker VM
   • CTo install the Cortex XDR agent on endpoints
   • DTo ingest data from various sources into Cortex XDR
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which method is typically used to install the Cortex XDR agent on a single Windows endpoint?

   • ARun the agent installer manually on the endpoint
   • BInstall the agent on the server and it replicates to all endpoints
   • CDeploy via a GPO or third-party management tool
   • DUse the Cortex XDR console to push the agent automatically
   Reveal Solution Discussion Select an answer first