XSIAM-Engineer試験無料問題集（122題）「Palo Alto Networks XSIAM Engineer 認定」

出題：1

Which option should be used when customizing a dashboard in Cortex XSIAM to include a widget that will display data filtered by more than one dynamic value?

A. Free text/number

B. Fixed filter

C. Single-select

D. Multi-select

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which step must be taken to enable Cloud Identity Engine on Cortex XSIAM?

A. Enable SSO integration.

B. Activate it in the Customer Support Portal.

C. Activate it on HUB.

D. Enable Active Directory log collection.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

A Cortex XDR agent is installed on an endpoint, but the agent is unable to download content updates and has not registered with the Cortex XSIAM server. An engineer troubleshoots the network connection and determines that, by design, this endpoint does not have direct internet access to the required network destinations for the Cortex XDR agent traffic.
A Broker VM that has the local agent settings applet enabled with Agent Proxy configured is reachable by the endpoint. The Broker VM details are as follows:
- FQDN: crtxbroker01.company.net
- Proxy listening port: 8888
How should the engineer configure the Cortex XDR agent to use the existing Broker VM as a proxy for the agent network traffic?

A. cytool proxy config "crtxbroker01.company.net:8888"

B. cytool set proxy --host crtxbroker01.company.net --port 8888

C. cytool config proxy --host crtxbroker01.company.net --port 8888

D. cytool proxy set "crtxbroker01. company.net: 8888"

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

What is the primary benefit of setting the "--memory-swap" option to "-1" during Cortex XSIAM engine deployment?

A. It enhances the network throughput by optimizing memory usage.

B. It automatically doubles the available RAM to the engine.

C. It allows the engine to operate without requiring swap capabilities.

D. It increases the total disk space available to the engine.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Administrators from Building 3 have been added to Cortex XSIAM to perform limited functions on a subset of endpoints. Custom roles have been created and applied to the administrators to limit their permissions, but their access should also be constrained through the principle of least privilege according to the endpoints they are allowed to manage. All endpoints are part of an endpoint group named "Building3," and some endpoints may also be members of other endpoint groups.
Which technical control will restrict the ability of the administrators to manage endpoints outside of their area of responsibility, while maintaining visibility to Building 3's endpoints?

A. SBAC enabled in Restrictive Mode with the "EG:Building3" tag assigned to each administrator's scope

B. SBAC enabled in Permissive Mode with the "EG:Building3" tag assigned to each administrator's scope

C. SBAC enabled in Building 3's IP range with the "EG:Building3" tag assigned to each administrator's scope

D. SBAC enabled globally with the "EG:Building3" tag assigned to each administrator's scope

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

An application which ingests custom application logs is hosted in an on-premises virtual environment on an Ubuntu server, and it logs locally to a .csv file.
Which set of actions will allow the ingestion of the .csv logs into Cortex XSIAM directly from the server?

A. Install XDR Collector on the Ubuntu server, and configure the agent to collect the files of interest.

B. Install a Cortex XDR agent on the Ubuntu server, and configure the agent to collect the files of interest.

C. Install a Broker VM in the environment, and configure the CSV Collector to collect the files of interest.

D. Install a Broker VM in the environment, and migrate the application to the Broker VM.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

An engineer wants a playbook to perform different actions based on the incident severity. Which task should be used?

A. Loop

B. Condition

C. Timer

D. Start

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

XSIAM-Engineer試験無料問題集「Palo Alto Networks XSIAM Engineer 認定」