1.1 Explain the Deployment Process, Objectives, and Resources (e.g., Hardware, Software, Data Sources, Integrations) XDR-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company wants to detect threats that originate from email and cloud applications. They already have endpoint protection and network monitoring. Which data source should they add to their XDR deployment to achieve this goal?

   • AMore endpoint telemetry
   • BNetwork flow logs
   • CEmail and cloud application logs
   • DThreat intelligence feeds
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company is deploying an on-premises XDR platform. They have a large number of endpoints and expect high network traffic. The IT team is planning the hardware resources. Which hardware consideration is most important to ensure the platform performs well?

   • AA backup power supply to prevent downtime
   • BA high-speed network switch to connect the XDR server to the internet
   • CA dedicated firewall to protect the XDR platform
   • DSufficient CPU and memory to handle the expected data processing load
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An organization is preparing to install an XDR platform on a new server. The server runs a recent version of a Linux distribution. The installation guide specifies a particular operating system version and a set of software dependencies. What should the team do first to ensure a smooth installation?

   • AInstall the XDR platform directly and troubleshoot any errors that occur
   • BVerify that the server's operating system version matches the supported version listed in the installation guide
   • CUpdate the server's operating system to the latest version available
   • DAllocate additional storage to the server before installation
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which software component is required on each endpoint for an XDR deployment to collect telemetry?

   • AA web browser
   • BA VPN client
   • CAn endpoint agent
   • DA database client
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An organization already uses a SIEM and a threat intelligence feed. They are deploying an XDR platform and want to leverage these existing investments. What is the best way to integrate these tools with the XDR platform?

   • AUse the SIEM to collect data from the XDR platform, but do not send any data to the SIEM
   • BDisable the threat intelligence feed because XDR has built-in intelligence
   • CReplace the SIEM with the XDR platform and stop using the threat intelligence feed
   • DConfigure the XDR platform to send alerts to the SIEM and consume threat intelligence feeds
   Reveal Solution Discussion Select an answer first