XSIAM-Engineer Exam Question 21
An engineer is implementing Scope-Based Access Control (SBAC) alongside Role-Based Access Control (RBAC).
What is the benefit of SBAC in this context?
What is the benefit of SBAC in this context?
XSIAM-Engineer Exam Question 22
When Cortex XDR agents are on servers in a zone with no internet access, which configuration will keep them communicating with the platform?
XSIAM-Engineer Exam Question 23
An engineer wants to onboard data from a third-party vendor's firewall. There is no content pack available for it, so the engineer creates custom data source integration and parsing rules to generate a dataset with the firewall data.
How can the analytics capabilities of Cortex XSIAM be used on the data?
How can the analytics capabilities of Cortex XSIAM be used on the data?
XSIAM-Engineer Exam Question 24
A sub-playbook is configured to loop with a For Each Input. The following inputs are given to the sub-playbook:
Input x: W,X,Y,Z
Input y: a,b,c,d
Input z: 9
Which inputs will be used for the second iteration of the loop?
Input x: W,X,Y,Z
Input y: a,b,c,d
Input z: 9
Which inputs will be used for the second iteration of the loop?
XSIAM-Engineer Exam Question 25
An engineer needs to migrate Cortex XDR agents without internet connection from Cortex XSIAM tenant A to Cortex XSIAM tenant B. There is a broker configured for each tenant. This is the communication flow:
- XDR agents <-> Broker A <-> XSIAM tenant A
- XDR agents <-> Broker B <-> XSIAM tenant B
Which two steps should be taken before moving the agents? (Choose two.)
- XDR agents <-> Broker A <-> XSIAM tenant A
- XDR agents <-> Broker B <-> XSIAM tenant B
Which two steps should be taken before moving the agents? (Choose two.)
