1.2 Explain the Process of Planning and Deploying Engines XSOAR-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   When decommissioning an XSOAR engine, which step should be performed first?

   • ARemoving all integrations assigned to the engine
   • BDeleting the engine's logs from the XSOAR server
   • CPowering off the engine's virtual machine
   • DUninstalling the engine software from the server
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A small security team is planning its first XSOAR deployment. They have a limited number of integrations, all of which are cloud-based and accessible via the internet. The team is considering whether to deploy an engine or use the built-in XSOAR server integrations. What is the primary reason to deploy a dedicated engine in this scenario?

   • ATo reduce the load on the XSOAR server by offloading integration execution.
   • BTo enable the use of cloud-based integrations that are not available on the server.
   • CTo allow the XSOAR server to be placed in a different network zone than the integrations.
   • DTo provide a local cache of all playbook data for faster execution.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An administrator is installing a new XSOAR engine on a Windows Server. During the installation, the administrator is prompted for a registration key. The administrator does not have a key and is unsure where to generate one. What should the administrator do?

   • ASkip the registration key and configure the engine later from the server.
   • BContact Palo Alto Networks support to obtain a universal registration key.
   • CGenerate a new registration key from the XSOAR server's UI under the engine management section.
   • DUse a generic key that is hardcoded in the engine installer.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the first step in the initial setup of a newly installed XSOAR engine?

   • AConfiguring the firewall to allow outbound traffic
   • BRegistering the engine with the XSOAR server
   • CSetting the engine's time zone to match the server
   • DInstalling the integration pack for the target system
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A global company is deploying XSOAR engines to support regional SOC teams. Each region has its own data residency requirements, and the company wants to ensure that playbooks processing data for a specific region only run on engines located in that region. The XSOAR server is centrally hosted in the US. How can the company enforce this data residency constraint?

   • ADeploy a single engine in the US and rely on the XSOAR server to route tasks based on the data's origin.
   • BDeploy all engines in the US but configure them with different IP addresses to simulate regional presence.
   • CDeploy engines in each region and configure the integrations for that region to use the local engine only.
   • DUse a single engine in the US and implement custom scripts in the playbooks to check the data's origin before processing.
   Reveal Solution Discussion Select an answer first