1.4 Install and Configure Cortex XSIAM Components XSIAM-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In the Cortex XSIAM agent configuration, what is the purpose of a collection policy?

   • ASet the frequency of agent updates
   • BDetermine the agent's log retention period
   • CConfigure the agent's proxy authentication credentials
   • DDefine which data types and events the agent collects from the endpoint
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a common method to monitor the health of a Broker VM?

   • AChecking the DNS server records
   • BExamining the firewall's traffic logs
   • CChecking the Broker VM status in the Cortex XSIAM console
   • DReviewing the endpoint agent logs
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security analyst notices that several Cortex XSIAM agents are showing a status of 'Disconnected' in the console. The agents were working earlier. What is the first step to troubleshoot this issue?

   • ACheck the agent's network connectivity to the Cortex XSIAM server or Broker VM.
   • BUpdate the agent to the latest version.
   • CVerify that the agent's collection policies are still enabled.
   • DUninstall and reinstall the agent on the affected endpoints.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary role of the Broker VM in a Cortex XSIAM deployment?

   • AStore all historical security data
   • BCollect and forward data from various sources to Cortex XSIAM
   • CRun machine learning models for threat detection
   • DProvide a user interface for security analysts
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company is deploying Broker VM to collect data from multiple network segments. They need to ensure that the Broker VM can receive data from all segments while maintaining security. Where should they deploy the Broker VM?

   • AIn a DMZ segment with access to all other segments.
   • BIn a central network segment that has network routes to all data sources.
   • CIn the same segment as the Cortex XSIAM server.
   • DIn the cloud, separate from the on-premises network.
   Reveal Solution Discussion Select an answer first