6.6 Validate and Monitor Asset Inventory XSIAM-ANALYST Practice Questions (Page 5)

Questions 21–24

1. 21application · medium

   An organization is migrating from an on-premises data center to a cloud environment. The XSIAM asset inventory still contains many on-premises servers that have been decommissioned. The security team wants to ensure the inventory is accurate for the new cloud-focused environment. What is the best approach?

   • ARely on the cloud provider's asset list as the new inventory and ignore XSIAM.
   • BDelete all on-premises assets from the inventory immediately.
   • CKeep the on-premises assets in the inventory and only add cloud assets manually.
   • DUpdate the inventory to mark on-premises assets as 'decommissioned' and add cloud assets as they are discovered.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company uses XSIAM for asset inventory and also has an external vulnerability scanner that maintains its own asset list. The security team wants to ensure the XSIAM inventory is complete. What is the best way to use the vulnerability scanner's data?

   • AReplace the XSIAM inventory with the vulnerability scanner's asset list.
   • BIgnore the vulnerability scanner's data because it is not a source of truth.
   • CManually add all assets from the vulnerability scanner to XSIAM.
   • DUse the vulnerability scanner's asset list to identify assets that may be missing from XSIAM and investigate them.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   An XSIAM analyst wants to monitor the asset inventory for unauthorized additions. Which approach is most effective?

   • ADisable automatic asset discovery to prevent new assets from being added.
   • BCompare the inventory with the list of assets that were present at the time of deployment.
   • CSet up alerts for new assets that appear in the inventory without a corresponding approved change request.
   • DManually review the inventory at the end of each month for any changes.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company uses XSIAM for asset inventory and also maintains a separate list of assets in a spreadsheet. The security team is concerned about discrepancies between the two. What is the most effective way to ensure the XSIAM inventory is the single source of truth?

   • ARegularly reconcile the XSIAM inventory with the spreadsheet and update the spreadsheet to match XSIAM.
   • BStop using the spreadsheet and rely solely on XSIAM's discovery.
   • CImport the spreadsheet into XSIAM and delete the spreadsheet.
   • DUse the spreadsheet as the source of truth and update XSIAM to match it.
   Reveal Solution Discussion Select an answer first