1.4 Install and Configure Cortex XSIAM Components XSIAM-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In which environment is the Cortex XSIAM engine typically installed?

   • AOnly in the Cortex XSIAM cloud
   • BOnly on endpoints
   • COn-premises or in a cloud environment as required by the deployment
   • DOnly on physical hardware
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security team is managing Cortex XSIAM agents across multiple departments. Some agents are not receiving updates. The team wants to ensure all agents are updated to the latest version. What is the most efficient approach?

   • AManually update each agent by downloading the installer.
   • BCreate a script to update agents via SSH.
   • CWait for the agents to update automatically.
   • DUse the Cortex XSIAM console to push updates to all agents at once.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A Broker VM is deployed in a network segment that is being decommissioned. The security team needs to move the Broker VM to a new segment without losing data. What should they do?

   • ADecommission the old Broker VM and rely on other data collection methods.
   • BMove the existing Broker VM to the new segment by changing its IP address.
   • CBackup the Broker VM's configuration and restore it on a new VM in the new segment.
   • DDeploy a new Broker VM in the new segment, configure it, and then decommission the old one.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which action verifies that the Cortex XSIAM agent has been successfully deployed on a Windows endpoint?

   • AVerify the agent's installation folder exists on the endpoint
   • BEnsure the endpoint has internet access
   • CConfirm the agent process is running in Task Manager
   • DCheck the agent status in the Cortex XSIAM console under Endpoints
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is installing the Cortex XSIAM engine in a Kubernetes environment. They need to ensure the engine can process data from multiple sources and store it appropriately. What should they do during installation?

   • AInstall the engine as a standalone VM and connect it to the Kubernetes cluster.
   • BUse the engine's default settings without any additional configuration.
   • CDeploy the engine on a separate network segment to isolate it from the Kubernetes cluster.
   • DDeploy the engine using the provided Helm chart and configure the storage class for persistent volumes.
   Reveal Solution Discussion Select an answer first