1.2 Explain the Deployment and Functionality of Cortex XDR Components XDR-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   How is the XDR Collector typically deployed?

   • AAs a cloud-native service
   • BAs a software agent on each endpoint
   • CAs a hardware appliance
   • DAs a virtual appliance on-premises
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An organization has multiple data sources, including Windows event logs, Linux syslog, and cloud API logs. They want to centralize these into Cortex XDR for threat hunting. What is the role of the XDR Collector in this architecture?

   • AIt provides real-time blocking of malicious traffic from the data sources.
   • BIt aggregates data from these sources and forwards it to Cortex XDR in a normalized format.
   • CIt runs the Cortex XDR agent on the data sources to collect telemetry.
   • DIt stores the data locally for long-term retention and only sends alerts to Cortex XDR.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which type of data does the Cortex XDR agent collect from an endpoint?

   • AOnly file hashes and malware signatures
   • BProcess activity and network connections
   • COnly network traffic packets
   • DOnly user login and logout events
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary function of the Broker VM in network traffic inspection?

   • ATo decrypt all SSL traffic
   • BTo store traffic logs for compliance
   • CTo capture and forward traffic to Cortex XDR for analysis
   • DTo block malicious traffic in real-time
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   In which deployment scenario is the Broker VM typically used?

   • ATo provide a cloud-based management console
   • BTo replace the Cortex XDR agent on all endpoints
   • CTo store all endpoint logs indefinitely
   • DTo inspect traffic from endpoints that cannot have the agent installed
   Reveal Solution Discussion Select an answer first