Free Palo Alto Networks XDR-Engineer Exam Dumps Questions & Answers

A query is created that will run weekly via API. After it is tested and ready, it is reviewed in the Query Center. Which available column should be checked to determine how many compute units will be used when the query is run?

• A.  Query Status
• B.  Compute Unit Usage
• C.  Compute Unit Quota
• D.  Simulated Compute Units

A new parsing rule is created, and during testing and verification, all the logs for which field data is to be parsed out are missing. All the other logs from this data source appear as expected. What may be the cause of this behavior?

• A.  The filter stage is dropping the logs
• B.  The Broker VM is offline
• C.  The XDR Collector is dropping the logs
• D.  The parsing rule corrupted the database

The most recent Cortex XDR agents are being installed at a newly acquired company. A list with endpoint types (i.e., OS, hardware, software) is provided to the engineer. What should be cross-referenced for the Linux systems listed regarding the OS types and OS versions supported?

• A.  Kernel Module Version Support
• B.  End-of-Life Summary
• C.  Agent Installer Certificate
• D.  Content Compatibility Matrix

An XDR engineer is creating a correlation rule to monitor login activity on specific systems. When the activity is identified, an alert is created. The alerts are being generated properly but are missing the username when viewed. How can the username information be included in the alerts?

• A.  Add a mapping for the username field in the alert fields mapping
• B.  Update the query in the correlation rule to include the username field
• C.  Add a drill-down query to the alert which pulls the username field
• D.  Select "Initial Access" in the MITRE ATT&CK mapping to include the username

During deployment of Cortex XDR for Linux Agents, the security engineering team is asked to implement memory monitoring for agent health monitoring. Which agent service should be monitored to fulfill this request?

• A.  dypdng
• B.  pmd
• C.  pyxd
• D.  clad