Palo Alto Networks XSIAM Engineer - XSIAM-Engineer 模擬練習
Based on the _raw_log and XQL query information below, what will be the result(s) of the temp_value?
正解: B
解説: (PassTest メンバーにのみ表示されます)
To simplify the configuration process, which field is automatically mapped from the dataset to the data model without requiring manual configuration?
正解: B
解説: (PassTest メンバーにのみ表示されます)
What happens if a playbook executes an automation command that requires an unavailable integration instance?
正解: A
解説: (PassTest メンバーにのみ表示されます)
An engineer is integrating third-party logs into Cortex XSIAM and observes that data transformations during ingestion are causing inconsistencies in the Analytics Engine. The engineer needs to ensure that logs are normalized to a consolidated schema with predefined data types to support out-of-the-box analytics.
Which feature should be used to achieve this normalization?
Which feature should be used to achieve this normalization?
正解: D
解説: (PassTest メンバーにのみ表示されます)
An engineer needs to migrate Cortex XDR agents without internet connection from Cortex XSIAM tenant A to Cortex XSIAM tenant B. There is a broker configured for each tenant. This is the communication flow:
- XDR agents <-> Broker A <-> XSIAM tenant A
- XDR agents <-> Broker B <-> XSIAM tenant B
Which two steps should be taken before moving the agents? (Choose two.)
- XDR agents <-> Broker A <-> XSIAM tenant A
- XDR agents <-> Broker B <-> XSIAM tenant B
Which two steps should be taken before moving the agents? (Choose two.)
正解: B,C
解説: (PassTest メンバーにのみ表示されます)
Which two configuration steps are crucial when enhancing the security of a Cortex XSIAM engine that needs to interface with multiple domain controllers, each requiring a unique certificate for compliance reasons? (Choose two.)
正解: B,C
解説: (PassTest メンバーにのみ表示されます)