Free XDR-Engineer Exam Braindumps (page: 2)

Page 2 of 14

[Data Ingestion and Integration]
An administrator wants to employ reusable rules within custom parsing rules to apply consistent log field extraction across multiple data sources.
Which section of the parsing rule should the administrator use to define those reusable rules in Cortex XDR?

  1. RULE
  2. INGEST
  3. FILTER
  4. CONST

Answer(s): D



[Data Ingestion and Integration]
What will be the output of the function below?
L_TRIM("a* aapple", "a")

  1. ' aapple'
  2. " aapple"
  3. "pple"
  4. " aapple-"

Answer(s): A



[Data Ingestion and Integration]
How can a customer ingest additional events from a Windows DHCP server into Cortex XDR with minimal configuration?

  1. Activate Windows Event Collector (WEC)
  2. Install the XDR Collector
  3. Enable HTTP collector integration
  4. Install the Cortex XDR agent

Answer(s): B



[Cortex XDR Agent Configuration]
How are dynamic endpoint groups created and managed in Cortex XDR?

  1. Endpoint groups require intervention to update the group with new endpoints when a new device is added to the network
  2. Each endpoint can belong to multiple groups simultaneously, allowing different security policies to be applied to the same device at the same time
  3. After an endpoint group is created, its assigned security policy cannot be changed without deleting and recreating the group
  4. Endpoint groups are defined based on fields such as OS type, OS version, and network segment

Answer(s): D






Post your Comments and Discuss Palo Alto Networks XDR-Engineer exam with other Community members: