1.1 Explain the Deployment Process, Objectives, and Resources (e.g., Hardware, Software, Data Sources, Integrations) XDR-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   An organization has an existing SIEM and a SOAR platform. They are deploying an XDR platform and want to integrate it with both. The SIEM is used for long-term log storage and compliance, while the SOAR is used for automated incident response. What is the most effective integration strategy?

   • ASend XDR alerts to the SIEM for storage and to the SOAR for automated response
   • BIntegrate XDR only with the SOAR and store logs in the XDR platform
   • CIntegrate XDR only with the SIEM and use its built-in response capabilities
   • DReplace the SIEM and SOAR with the XDR platform
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which hardware resource is typically required for an on-premises XDR deployment?

   • AA network tap
   • BA hardware security module (HSM)
   • CA dedicated storage array
   • DA load balancer
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In an XDR deployment, which hardware component is essential for processing and analyzing security data?

   • AFirewalls
   • BSwitches
   • CCables
   • DServers
   Reveal Solution Discussion Select an answer first
5. 9expert · hard · select all that apply

   A company is deploying an XDR platform and wants to detect threats that involve user behavior, such as phishing and insider threats. They have endpoint telemetry and network logs. Which additional data sources should they integrate to improve detection of these threats? Select all that apply.

   • ACloud application logs
   • BThreat intelligence feeds
   • CFirewall logs
   • DEmail logs
   • EIdentity and access management (IAM) logs
   Check answers Discussion Select an answer first
6. 10foundation · easy

   How does XDR typically integrate with a SIEM system?

   • ABy replacing the SIEM entirely
   • BBy acting as a firewall
   • CBy storing all SIEM logs
   • DBy sending alerts and receiving enrichment data
   Reveal Solution Discussion Select an answer first