1.2 Explain the Deployment and Functionality of Cortex XDR Components XDR-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company is deploying Cortex XDR to endpoints that are often offline or on a guest network. They also use Cloud Identity Engine for user context. What is a challenge they might face and how should they address it?

   • AThe agent may not receive policy updates while offline; they should configure the agent to cache policies and apply them when back online.
   • BThe agent will not function at all when offline; they should ensure endpoints always have internet access.
   • CThe agent cannot be installed on endpoints that are offline; they must be connected during installation.
   • DCloud Identity Engine will not work for offline endpoints; they should deploy a local identity server.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company has a mix of Windows and Linux servers. They want to deploy the Cortex XDR agent to all of them. What is a consideration for this deployment?

   • AInstall the Windows agent on Linux servers using compatibility mode.
   • BDeploy the agent only to Windows servers and use the XDR Collector for Linux.
   • CUse the same installation package for both Windows and Linux.
   • DDownload the appropriate agent package for each OS from the Cortex XDR console.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   How does the Broker VM facilitate integration with third-party products?

   • ABy installing third-party software on endpoints
   • BBy replacing the need for third-party security tools
   • CBy forwarding network traffic to third-party tools for analysis
   • DBy storing third-party logs in its database
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   How does Cloud Identity Engine provide user information to Cortex XDR?

   • ABy synchronizing user and group data from directory services
   • BBy analyzing network traffic to infer users
   • CBy reading user information from endpoint agents
   • DBy storing user credentials for authentication
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company is rolling out Cortex XDR to 5,000 Windows endpoints. The security team wants to ensure that the agent is installed with the correct security profile and that the installation is tracked in the Cortex XDR console. They plan to use an existing software distribution tool. What should they do?

   • ADeploy the agent via GPO using the MSI file, then manually assign the security profile in the console after installation.
   • BUse the Cloud Identity Engine to push the agent to all endpoints automatically.
   • CInstall the agent manually on a pilot group, then export the configuration and import it into the software distribution tool.
   • DDownload the agent package from the Cortex XDR console and deploy it using the software distribution tool, specifying the installation token.
   Reveal Solution Discussion Select an answer first