3.5 Create Custom Dashboards and Reporting Templates XSIAM-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   An organization needs to generate a report that includes data from two different data sources: firewall logs and endpoint logs. The report should show a combined view of incidents from both sources. The administrator has created a reporting template, but the template only pulls data from firewall logs. What should the administrator do to include endpoint log data?

   • AChange the template's data source to endpoint logs, replacing the firewall log data.
   • BCreate a second reporting template for endpoint logs and merge the two reports manually.
   • CCreate a dashboard with widgets for both data sources and export it as a report.
   • DEdit the template to add a second data source and configure the fields to include endpoint log data.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What actions are part of managing a dashboard's layout in XSIAM?

   • AAssigning user roles and permissions for the dashboard
   • BChanging the data source and applying filters to widgets
   • CAdding, removing, resizing, and repositioning widgets
   • DSetting up report scheduling and delivery options
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security operations team needs a report that is generated every 6 hours and sent to two different teams: the SOC team and the management team. The SOC team needs the report in CSV format for further analysis, while management needs it in PDF format for readability. What is the most efficient way to configure this?

   • ACreate one reporting template with CSV format and share it with both teams.
   • BCreate one reporting template with PDF format and share it with both teams.
   • CCreate two separate reporting templates with the same data filters, one with CSV format for the SOC team and one with PDF format for management, each scheduled every 6 hours.
   • DCreate one reporting template with PDF format, schedule it every 6 hours, and have the SOC team manually convert it to CSV.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In XSIAM, what is the primary purpose of creating a custom dashboard?

   • ATo define the schema for data ingested from third-party sources
   • BTo aggregate security data from multiple widgets into a single, at-a-glance view
   • CTo automatically execute remediation actions on detected threats
   • DTo permanently store raw log data for long-term compliance retention
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In XSIAM, what does sharing a custom dashboard allow another user to do?

   • ADelete the dashboard from the system
   • BModify the underlying data sources of the dashboard
   • CView the dashboard according to the permissions granted
   • DChange the dashboard's global data retention settings
   Reveal Solution Discussion Select an answer first