Based on the image below, what will fail to function correctly as a result of missing Load Balancer FQDN configuration in the Broker VM cluster configuration?

A SOC team uses a default parsing rule for a firewall integration but needs to parse a proprietary field specific to their environment. The team wants to ensure the custom parsing logic runs after the default rule and remains intact during content updates.
Which parsing rule section should be used?

A vulnerability analyst asks a Cortex XSIAM engineer to identify assets vulnerable to newly reported zero-day CVE affecting the "ai_app" application and versions 12.1, 12.2, 12.4, and 12.5.
Which XQL query will provide the required result?

After deploying a new custom log source via the Broker VM, an engineer notices the daily ingestion quota is being exceeded. Analysis shows that a specific "verbose" flag on the source application is sending unneeded system state data which needs to be excluded from the logs being committed to the data lake.
Which Cortex XSIAM feature allows the engineer to define the logic?

A Cortex XSIAM engineer at a SOC downgrades a critical threat intelligence content pack from the Cortex Marketplace while performing routine maintenance. As a result, the SOC team loses access to the latest threat intelligence data.
Which action will restore the functionality of the content pack to its previously installed version?