Palo Alto Networks XSIAM Engineer - XSIAM-Engineer무료 덤프문제 풀어보기
A security engineer is configuring the Cloud Identity Engine integration in Cortex XSIAM but cannot select a Cloud Identity Engine instance in the configuration dialog until the instance is activated.
Which platform is used for activation?
Which platform is used for activation?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
A Cortex XSIAM engineer is implementing role-based access control (RBAC) and scope-based access control (SBAC) for users accessing the Cortex XSIAM tenant with the following requirements:
- Users managing machines in Europe should be able to manage and control all endpoints and installations, create profiles and policies, view alerts, and initiate Live Terminal, but only for endpoints in the Europe region.
- Users managing machines in Europe should not be able to create, modify, or delete new or existing user roles.
The Europe region endpoints are identified by both of the following:
- Endpoint Tag = "Europe-Servers" and Endpoint Group = "Europe" for servers in Europe
- Endpoint Group = "Europe" and Endpoint Tag = "Europe-Workstation" for workstations in Europe Which two sets of implementation actions should the engineer take? (Choose two.)
- Users managing machines in Europe should be able to manage and control all endpoints and installations, create profiles and policies, view alerts, and initiate Live Terminal, but only for endpoints in the Europe region.
- Users managing machines in Europe should not be able to create, modify, or delete new or existing user roles.
The Europe region endpoints are identified by both of the following:
- Endpoint Tag = "Europe-Servers" and Endpoint Group = "Europe" for servers in Europe
- Endpoint Group = "Europe" and Endpoint Tag = "Europe-Workstation" for workstations in Europe Which two sets of implementation actions should the engineer take? (Choose two.)
정답: A,C
설명: (Fast2test 회원만 볼 수 있음)
Based on the _raw_log and XQL query information below, what will be the result(s) of the temp_value?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
Which XQL aggregation function returns the number of records within each group?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
When activating the Cortex XSIAM tenant, how is the data at rest configured with AES 128 encryption?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
Which types of content may be included in a Marketplace content pack?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
Using the integrationContext object, how is data stored and retrieved between integration command runs in Cortex XSIAM?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
Which two alert notification options can be configured without creating a playbook? (Choose two.)
정답: A,D
설명: (Fast2test 회원만 볼 수 있음)