3.5 Create Custom Dashboards and Reporting Templates XSIAM-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   An administrator is creating a report template for a regulatory requirement that mandates the report include only incidents from the 'EU-West' region and must exclude any incidents marked as 'Test'. The report is generated weekly. The administrator has added a filter for region equals 'EU-West'. What additional step is required to ensure 'Test' incidents are excluded?

   • AAdd a second filter condition to exclude incidents where the 'Test' flag is true.
   • BCreate a separate report for 'Test' incidents and subtract it from the main report.
   • CManually review the generated report and remove any 'Test' incidents before sending it.
   • DModify the region filter to also exclude 'Test' incidents.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A security team has a reporting template that is used for a weekly compliance report. The team needs to create a one-time special report for an audit that uses the same structure but with a different time range (last 90 days instead of last 7 days). The team wants to keep the weekly template unchanged. What should the administrator do?

   • ADuplicate the template, change the time range filter to 90 days in the duplicate, and generate the report on demand.
   • BCreate a new template from scratch with the same structure and a 90-day time range.
   • CEdit the original template to change the time range to 90 days, generate the report, then change it back to 7 days.
   • DGenerate the report from the original template and manually filter the results to the last 90 days.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a valid visualization type for a widget in XSIAM?

   • ABar chart
   • BFirewall rule
   • CPacket capture
   • DLog parser
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In XSIAM, what can be configured for an individual widget on a dashboard?

   • AIts role in the incident response workflow
   • BIts access permissions for individual users
   • CIts data retention period
   • DIts data source, filters, and visualization type
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a delivery option for a scheduled report in XSIAM?

   • ASending the report to specified recipients via email
   • BAutomatically applying the report data to firewall rules
   • CDeleting the report after it is generated
   • DStoring the report in a packet capture file
   Reveal Solution Discussion Select an answer first