1.4 Install and Configure Cortex XSIAM Components XSIAM-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Where in the Cortex XSIAM console would you check the status of all deployed agents?

   • AIncident management page
   • BEndpoints or Agents management page
   • CData sources page
   • DPlaybook management page
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A Cortex XSIAM engine is experiencing high latency in processing data. The administrator has verified that the engine's resources are sufficient and the network is stable. What could be the cause?

   • AThe data sources are sending too much data.
   • BThe engine's processing pipeline is misconfigured, causing a bottleneck.
   • CThe engine's clock is out of sync.
   • DThe engine's storage is fragmented.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   The Cortex XSIAM engine is not processing data from a specific data source. The data source is sending data to the engine's endpoint. What should the administrator check first?

   • AVerify that the data source is configured correctly in the engine's integration settings.
   • BIncrease the engine's logging level.
   • CRestart the engine's processing service.
   • DCheck the engine's storage capacity.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An organization needs to ensure that Cortex XSIAM agents on roaming laptops can connect to Cortex XSIAM from any network. The laptops use a VPN when off-site. What should be configured on the agents?

   • ASet the agent's server address to the public Cortex XSIAM endpoint.
   • BConfigure the agent to use the VPN's DNS server.
   • CDisable the agent's proxy settings.
   • DSet the agent to use a Broker VM as a proxy.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   An administrator is troubleshooting a Cortex XSIAM engine that is not processing data from a specific source. The source is sending data to the engine, but the engine is not ingesting it. The administrator has verified the source configuration. What should they check next?

   • ACheck the engine's data ingestion logs for errors.
   • BCheck the network connectivity between the source and the engine.
   • CRestart the engine's processing service.
   • DVerify that the engine has enough storage.
   Reveal Solution Discussion Select an answer first