XDR-Engineer無料問題集「Palo Alto Networks XDR Engineer」

質問 1

When onboarding a Palo Alto Networks NGFW to Cortex XDR, what must be done to confirm that logs are being ingested successfully after a device is selected and verified?

（A）Wait for an incident that involves the NGFW to populate

（B）Retrieve device certificate from NGFW dashboard

（C）Confirm that the selected device has a valid certificate

（D）Conduct an XQL query for NGFW log data

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Which configuration profile option with an available built-in template can be applied to both Windows and Linux systems by using XDR Collector?

（A）XDR Collector settings

（B）Filebeat

（C）Winlogbeat

（D）HTTP Collector template

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

What is the earliest time frame an alert could be automatically generated once the conditions of a new correlation rule are met?

（A）Between 10 and 20 minutes

（B）Immediately

（C）5 minutes or less

（D）Between 30 and 45 minutes

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

When onboarding a Palo Alto Networks NGFW to Cortex XDR, what must be done to confirm that logs are being ingested successfully after a device is selected and verified?

（A）Wait for an incident that involves the NGFW to populate

（B）Retrieve device certificate from NGFW dashboard

（C）Confirm that the selected device has a valid certificate

（D）Conduct an XQL query for NGFW log data

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

An XDR engineer is creating a correlation rule to monitor login activity on specific systems. When the activity is identified, an alert is created. The alerts are being generated properly but are missing the username when viewed. How can the username information be included in the alerts?

（A）Add a drill-down query to the alert which pulls the username field

（B）Update the query in the correlation rule to include the username field

（C）Add a mapping for the username field in the alert fields mapping

（D）Select "Initial Access" in the MITRE ATT&CK mapping to include the username

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

XDR-Engineer 無料問題集「Palo Alto Networks XDR Engineer」

弊社を連絡する

関連リンク

トップ試験