5.2 Validate Agent Operational Status XSIAM-ANALYST Practice Questions (Page 5)

Questions 21–22

1. 21foundation · easy

   An analyst notices that an XSIAM agent is 'Degraded' and suspects high resource usage. Which action is most appropriate to confirm this?

   • ADisable the agent's protection features
   • BCheck the agent's CPU and memory usage on the endpoint
   • CReinstall the agent
   • DRestart the agent service
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company has agents deployed on endpoints that are frequently offline (e.g., laptops). The security team wants to ensure they can still validate agent operational status when the endpoints are offline. What should they do?

   • ASet the agent to check in more frequently to reduce the offline window.
   • BUse a different agent that supports offline mode.
   • CConfigure the agent to buffer data and send it when back online.
   • DReview the last known check-in time and status before the endpoint went offline.
   Reveal Solution Discussion Select an answer first