5.1 Validate Endpoint Profiles and Policies XSIAM-ANALYST Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which step is part of troubleshooting profile and policy issues?

   • AChanging the endpoint's IP address randomly
   • BRebooting the endpoint without any investigation
   • CChecking the endpoint's policy enforcement status in the management console
   • DDeleting the endpoint from the management console
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What does profile-policy alignment ensure?

   • AThat endpoint profiles are only applied to servers
   • BThat endpoint profiles and policies are consistent with each other and with security requirements
   • CThat endpoint policies are stored in the same location as profiles
   • DThat endpoint profiles are more important than policies
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of validating endpoint profiles in XSIAM?

   • ATo verify that endpoint hardware meets minimum performance requirements
   • BTo confirm that endpoints are connected to the internet at all times
   • CTo ensure that endpoint profiles are correctly assigned and configured to match organizational security policies
   • DTo check that endpoint users have the correct administrative privileges
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company has just migrated 500 endpoints to XSIAM. The security team expects all endpoints to receive the 'Standard Workstation' profile, which includes a firewall policy that blocks inbound SMB traffic. During validation, you notice that 50 endpoints in the marketing department are showing the 'Default' profile instead. These endpoints are all in the same Active Directory OU. What should you do first to resolve this?

   • AReinstall the XSIAM agent on one of the affected endpoints to see if the profile applies correctly.
   • BManually assign the 'Standard Workstation' profile to each of the 50 endpoints in the XSIAM console.
   • CCheck the firewall policy logs to see if inbound SMB traffic is being blocked on those endpoints.
   • DVerify that the profile assignment rule for the marketing OU is correctly configured and that the endpoints are being discovered with the correct OU attribute.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company has a policy that requires all endpoints to have disk encryption enabled. The policy is assigned to all endpoints. During validation, you find that some endpoints show the policy as 'Compliant' while others show 'Non-Compliant'. What should you do to resolve the non-compliant endpoints?

   • AIgnore the non-compliant endpoints because they are not important.
   • BReassign the policy to the non-compliant endpoints.
   • CChange the policy to allow non-encrypted endpoints.
   • DCheck if the non-compliant endpoints have a compatible encryption solution installed.
   Reveal Solution Discussion Select an answer first