Question 1

What is a key characteristic of a parsing rule in Cortex XSIAM?

Options :

A : It uses regular expressions exclusively for data modifications, discards unmatched logs by default, and only retains fields with non-null values.

B : It is bound to all vendors and products, performs data parsing once per log, and does not allow grouping.

C : It is bound to a specific vendor and product, performs data parsing once per log, and does not allow grouping.

D : It is bound to a specific vendor and product which allow grouping with a no-match policy, and retains all fields.

Answer: C

Question 2

What is a key characteristic of a parsing rule in Cortex XSIAM?

Options :

A : It uses regular expressions exclusively for data modifications, discards unmatched logs by default, and only retains fields with non-null values.

B : It is bound to all vendors and products, performs data parsing once per log, and does not allow grouping.

C : It is bound to a specific vendor and product, performs data parsing once per log, and does not allow grouping.

D : It is bound to a specific vendor and product which allow grouping with a no-match policy, and retains all fields.

Answer: C

Question 3

Which cytool command will look up the policy being applied to a Cortex XDR agent?

Options :

A : cytool adaptive_policy interval 0

B : cytool payload_execution query

C : cytool adaptive_policy recalc

D : cytool persist print agent_settings.db

Answer: C

Question 4

A file for a support exception that needs to be updated locally on a Linux endpoint has been supplied.Which cytool command will upload this support exception file to the endpoint?

Options :

A : cytool upload suexfile -target

B : cytool upload suex -file

C : cytool import suex -path

D : cytool import suexfile -path

Answer: C

Question 5

Which cytool command will look up the policy being applied to a Cortex XDR agent?

Options :

A : cytool adaptive_policy interval 0

B : cytool payload_execution query

C : cytool adaptive_policy recalc

D : cytool persist print agent_settings.db

Answer: C

Free XSIAM-Engineer Mock Exam – Practice Online Confidently

Buying Options: