5.1 Validate Endpoint Profiles and Policies XSIAM-ANALYST Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An administrator is validating that a new 'High Security' profile is correctly assigned to a group of servers. The profile is assigned via a rule that matches the 'Server' group. However, the servers are showing the 'Default' profile. The servers are online and have the XSIAM agent installed. What is the most likely cause?

   • AThe servers are not members of the 'Server' group in XSIAM.
   • BThe servers have a different operating system than the profile supports.
   • CThe servers need to be rebooted to apply the profile.
   • DThe profile is not published yet.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   An organization has a 'Remote Workers' profile that includes a VPN configuration. The profile is assigned to a group of laptops. Some laptops are not receiving the VPN configuration, even though they are online and managed. The laptops are a mix of Windows and macOS. What is the most likely cause?

   • AThe laptops are not connected to the corporate network.
   • BThe VPN configuration in the profile is only supported on Windows.
   • CThe profile is not published yet.
   • DThe laptops have a local VPN client that conflicts with the profile.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An administrator is validating that a new 'Sales' profile is correctly assigned to a group of endpoints. The profile is assigned via a rule that matches the 'Sales' group. However, some endpoints in the 'Sales' group are showing the 'Default' profile. The endpoints are online and managed. What should the administrator check first?

   • AThe rule's order in the profile assignment list.
   • BThe endpoints' operating system version.
   • CThe endpoints' hardware manufacturer.
   • DThe endpoints' last check-in time.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a common issue that prevents endpoint policies from being applied correctly?

   • AThe endpoint has too much RAM
   • BThe endpoint is not connected to the management server
   • CThe endpoint user has a strong password
   • DThe endpoint is using a different web browser
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   An administrator is troubleshooting why a group of endpoints is not receiving any policies. The endpoints are online and show as managed. The administrator has verified that the profile is correctly assigned and the policies are enabled. What is the next best step?

   • ACheck if the endpoints have a conflicting local policy.
   • BCreate a new profile and assign it to the endpoints.
   • CReinstall the XSIAM agent on the endpoints.
   • DReboot the endpoints to apply the policies.
   Reveal Solution Discussion Select an answer first