XSIAM-Engineer無料問題集「Palo Alto Networks XSIAM Engineer」

質問 1

Which action is required to enable use of a custom script in an alert layout?

（A）Tag the script with "general-purpose-dynamic-section," add a custom script section, and edit the section settings to add the automation script.

（B）Tag the script with "general-purpose-dynamic-section," add a general purpose dynamic section, and edit the section settings to add the automation script.

（C）Tag the script with "dynamic-section," add a general purpose dynamic section, and edit the section settings to add the automation script.

（D）Add a general purpose dynamic section and edit the section settings to add the automation script.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

If Cortex XSIAM is ingesting logs from a custom application, which is most likely required?

（A）Building a custom parsing rule

（B）Deactivating data modeling

（C）Creating a custom BIOC rule

（D）Switching to agentless logging

正解：A 解答を投票する

質問 3

How must Cloud Identity Engine be deployed and activated on Cortex XSIAM?

（A）In a different region than Cortex XSIAM; logs can be verified using pan_dss_raw dataset

（B）In a different region than Cortex XSIAM; logs can be verified using endpoints dataset

（C）In the same region as Cortex XSIAM; logs can be verified using endpoints dataset

（D）In the same region as Cortex XSIAM; logs can be verified using pan_dss_raw dataset

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

What is the reason all Broker VM options are greyed out when a user attempts to select a Broker VM as a download source in the Agent Settings profile?

（A）NTP is not synchronized properly on the Broker VM.

（B）Local Agent Setting applet is currently activated without SSL certificate.

（C）The Broker VM is offline.

（D）Local Agent Setting applet is currently activated without FQDN.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which exception type should be configured when globally blocking a specific SHA256 hash but allowing its execution on some endpoints in the development environment?

（A）Support Exception Rules

（B）Legacy Agent Exception

（C）Agent Alert Exclusion

（D）Disable Prevention Rules

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

What is the purpose of using rolling tokens to manage Cortex XDR agents?

（A）To temporarily disable the agents during maintenance windows

（B）To periodically rotate encryption keys used for tenant communication

（C）To perform administration on agents without requiring static credentials

（D）To authorize agents to download and install content updates

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

What is the primary advantage of using sub-playbooks in Cortex XSIAM?

（A）Replace integration instances

（B）Reduce endpoint storage usage

（C）Increase endpoint licensing capacity

（D）Reuse common automation logic across multiple playbooks

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

A security administrator creates a Disable Injection and Prevention rule to troubleshoot a performance issue with a proprietary database application. Upon completing the troubleshooting, the administrator deletes the exclusion rule from the Cortex XSIAM console.
Why does the Cortex XDR agent continue to show the process as unprotected?

（A）The agent must perform a full content update before the new security policy is recognized.

（B）The application process must be restarted for the agent to inject its protection modules.

（C）The rule remains active in the local agent cache for 24 hours to prevent policy flapping.

（D）The administrator must manually trigger a Check-in Now action for affected endpoints.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Which XQL command specifies the columns displayed in the query results?

（A）summarize

（B）fields

（C）filter

（D）alter

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

XSIAM-Engineer 無料問題集「Palo Alto Networks XSIAM Engineer」

弊社を連絡する

関連リンク

トップ試験