1.3 Identify Communication Requirements for XSIAM Components XSIAM-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A security operations center is experiencing delays in real-time analytics due to high latency between collectors and the central platform. The network team has identified that the WAN link is congested. What is the most effective solution to reduce latency?

   • AReduce the number of collectors to decrease traffic.
   • BImplement Quality of Service (QoS) to prioritize XSIAM traffic over the WAN.
   • CUse a different WAN provider with lower latency.
   • DIncrease the bandwidth of the WAN link.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is deploying XSIAM collectors in a remote office to forward logs to the central XSIAM platform. The network team wants to minimize the number of firewall rules and reduce bandwidth usage. Which approach should you recommend?

   • AUse multiple inbound TCP connections from the central platform to each collector on different ports.
   • BConfigure the collectors to use a single outbound HTTPS connection to the central platform.
   • CHave collectors send logs via email to the central platform to avoid opening any ports.
   • DSet up a site-to-site VPN and allow all traffic between the office and the central platform.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the default port used for HTTPS communication between XSIAM components and the central platform?

   • A22
   • B443
   • C514
   • D80
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is deploying XSIAM in a hybrid cloud environment where some data sources are on-premises and others are in the cloud. The network team is concerned about the latency of sending cloud logs to the on-premises central platform. What is the best approach to reduce latency?

   • ADeploy a collector in the cloud to pre-process and forward logs to the on-premises platform.
   • BUse a VPN to connect the cloud and on-premises environments and rely on the VPN's performance.
   • CSend all cloud logs directly to the on-premises platform without any intermediate processing.
   • DMove the central platform to the cloud to be closer to the cloud data sources.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A large enterprise is planning to ingest high-volume log data from multiple sources into XSIAM. The network team is concerned about bandwidth saturation during peak hours. Which strategy should be implemented to ensure consistent data ingestion without overwhelming the network?

   • AImplement data compression and deduplication at the collectors before transmission.
   • BConfigure collectors to drop logs during peak hours to reduce traffic.
   • CUse a store-and-forward mechanism to send data only during off-peak hours.
   • DIncrease the bandwidth of the network links to handle peak loads.
   Reveal Solution Discussion Select an answer first