1.1 Explain the Deployment Process, Objectives, and Resources (e.g., Hardware, Software, Data Sources, Integrations) XDR-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company is deploying an XDR platform and wants to detect threats that span multiple stages of an attack, such as initial access via email, lateral movement through the network, and data exfiltration to the cloud. They have limited resources and must choose which data sources to integrate first. Which combination provides the best coverage for these attack stages?

   • AEmail logs and endpoint telemetry
   • BCloud application logs and endpoint telemetry
   • CEndpoint telemetry and network traffic logs
   • DEmail logs, network traffic logs, and cloud application logs
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the purpose of the XDR platform software in a deployment?

   • ATo replace the operating system on endpoints
   • BTo provide a user interface for manual log review
   • CTo aggregate and analyze data from multiple sources
   • DTo manage network switches
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company is deploying an XDR platform and has a limited budget. They have identified the data sources and integrations, but they are unsure whether to invest in additional hardware or in training for the SOC team. The SOC team is unfamiliar with XDR concepts. Which investment is more critical for a successful deployment?

   • AAdditional hardware, because the platform must perform well to handle the data load
   • BNeither, because the XDR platform is self-sufficient
   • CBoth are equally important, so the company should split the budget
   • DTraining for the SOC team, because the platform is only effective if the team knows how to use it
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a common data source for XDR?

   • AEndpoint telemetry
   • BBuilding access logs
   • CEmployee HR records
   • DMarketing analytics
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company is planning an XDR deployment and has a limited budget. They want to prioritize the most impactful data sources and integrations. Which approach best aligns with the deployment objectives?

   • ADeploy the XDR platform without any integrations to save money
   • BChoose the cheapest integrations regardless of their relevance
   • CIntegrate all possible data sources at once to maximize visibility
   • DStart with the data sources that address the highest-priority threats and expand later
   Reveal Solution Discussion Select an answer first