Palo Alto XSIAM ENGINEER
Q: 1
What is a key characteristic of a parsing rule in Cortex XSIAM?
Options
Q: 2
Which two requirements must be met for a Cortex XDR agent to successfully use the Broker VM as a
download source for content updates? (Choose two.)
Options
Q: 3
An engineer needs to migrate Cortex XDR agents without internet connection from Cortex XSIAM
tenant A to Cortex XSIAM tenant B. There is a broker configured for each tenant. This is the
communication flow:
XDR agents Broker A XSIAM tenant A
XDR agents Broker B XSIAM tenant B
Which two steps should be taken before moving the agents? (Choose two.)
Options
Q: 4
While using the remote repository on a Development XSIAM tenant, which two objects can be
pushed or pulled to the remote repository? (Choose two.)
Options
Q: 5
What is the primary benefit of setting the "--memory-swap" option to "-1" during Cortex XSIAM
engine deployment?
Options
Q: 6
A sub-playbook is configured to loop with a For Each Input. The following inputs are given to the sub-
playbook:
Input x: W,X,Y,Z
Input y: a,b,c,d
Input z: 9
Which inputs will be used for the second iteration of the loop?
Options
Q: 7
A Cortex XSIAM engineer is implementing role-based access control (RBAC) and scope-based access
control (SBAC) for users accessing the Cortex XSIAM tenant with the following requirements:
Users managing machines in Europe should be able to manage and control all endpoints and
installations, create profiles and policies, view alerts, and initiate Live Terminal, but only for
endpoints in the Europe region.
Users managing machines in Europe should not be able to create, modify, or delete new or existing
user roles.
The Europe region endpoints are identified by both of the following:
Endpoint Tag = "Europe-Servers" and Endpoint Group = "Europe" for servers in Europe
Endpoint Group = "Europe" and Endpoint Tag = "Europe-Workstation" for workstations in Europe
Which two sets of implementation actions should the engineer take? (Choose two.)
Options
Q: 8
Which section of a parsing rule defines the newly created dataset?
Options
Q: 9
How must Cloud Identity Engine be deployed and activated on Cortex XSIAM?
Options
Q: 10
Which cytool command will look up the policy being applied to a Cortex XDR agent?
Options
Question 1 of 10
