Palo Alto Networks XDR-Engineer Exam Questions

Vendor

Palo Alto Networks

Exam Code

XDR-Engineer

Exam Name

Palo Alto Networks Certified XDR Engineer

Exam Duration

90 Minutes

Total Questions

PDF VERSION

DEMO QUESTIONS

Q1:
[Planning and Installation]
When using Kerberos as the authentication method for Pathfinder, which two settings must be validated on the DNS server? (Choose two.)

A: DNS forwarders

B: Reverse DNS zone

C: Reverse DNS records

D: AD DS-integrated zones

Answer

Correct Answer: B, C

Q2:
[Post-Deployment Management and Configuration]
What happens when the XDR Collector is uninstalled from an endpoint by using the Cortex XDR console?

A: The files are removed immediately, and the machine is deleted from the system without any retention period

B: The machine status remains active until manually removed, and the configuration data is retained for up to seven days

C: It is uninstalled during the next heartbeat communication, machine status changes to Uninstalled, and the configuration data is retained for 90 days

D: The associated configuration data is removed from the Action Center immediately after uninstallation

Answer

Correct Answer: C

Q3:
[Dashboards and Reporting]
Which statement describes the functionality of fixed filters and dashboard drilldowns in enhancing a dashboard’s interactivity and data insights?

A: Fixed filters allow users to select predefined data values, while dashboard drilldowns enable users to alter the scope of the data displayed by selecting filter values from the dashboard header

B: Fixed filters limit the data visible in widgets, while dashboard drilldowns allow users to download data from the dashboard in various formats

C: Fixed filters let users select predefined or dynamic values to adjust the scope, while dashboard drilldowns provide interactive insights or trigger contextual changes, like linking to XQL searches

D: Fixed filters allow users to adjust the layout, while dashboard drilldowns provide links to external reports and/or dashboards

Answer

Correct Answer: C

Q4:
[Planning and Installation]
During deployment of Cortex XDR for Linux Agents, the security engineering team is asked to implement memory monitoring for agent health monitoring. Which agent service should be monitored to fulfill this request?

A: dypdng

B: clad

C: pyxd

D: pmd

Answer

Correct Answer: D

Q5:
[Detection Engineering]
A Custom Prevention rule that was determined to be a false positive alert needs to be tuned. The behavior was determined to be authorized and expected on the affected endpoint. Based on the image below, which two steps could be taken? (Choose two.)
[Image description: A Custom Prevention rule configuration, assumed to trigger a Behavioral Indicator of Compromise (BIOC) alert for authorized behavior]

A: Apply an alert exception

B: Apply an alert exclusion to the XDR behavioral indicator of compromise (BIOC) alert

C: Apply an alert exclusion to the XDR agent alert

D: Modify the behavioral indicator of compromise (BIOC) logic

Answer

Correct Answer: A, B

Testimonials – Real Results From Real Students

Your success is our priority. We’re proud to share authentic reviews from students who trusted us, passed their exams, and reached their goals with confidence.

This site has been a game-changer for my certification journey. The materials are current, reliable, and best of all—free! It's clear they're committed to supporting the IT community.

I passed my CompTIA Security+ exam on the first try thanks to this site. Their practice exams and study guides are top-notch. Highly recommend it to anyone serious about IT certifications.

I’ve passed three certifications using this site. Their materials are detailed and well-structured, and the fact that it’s free makes it even better.

If you're studying for any IT certification, this should be your first stop. It’s comprehensive, organized, and constantly updated.

This website helped me prepare for multiple certifications, and today I’m working in cybersecurity. Without their free resources, I wouldn’t be here.

Frequently Asked Question (FAQ's)

Have questions? You’re not alone. We’ve answered the most frequently asked questions to help you feel confident and informed every step of the way.

What is Prep2Certs?

Prep2Certsis a premium service offering a comprehensive collection of exam questions and answers for over 1400 certification exams. It is regularly updated and designed to help users pass their certification exams confidently.

My credit card is not accepted, I'm not able to purchase subscription. What should I do?

Please contact info@Prep2Certs.com and we will provide you with alternative payment options.

How can I renew my subscription?

You can by Contacting our sales team.

How long will I receive updates for the exams that I purchased?

Free updates are available for the duration of your subscription, after the subscription is expired, your access will no longer be available.

info@prep2certs.com

Palo Alto Networks XDR-Engineer Exam Questions

Vendor

Exam Code

Exam Name

Exam Duration

Total Questions

PDF VERSION

DEMO QUESTIONS

Q1:
[Planning and Installation]
When using Kerberos as the authentication method for Pathfinder, which two settings must be validated on the DNS server? (Choose two.)

A: DNS forwarders

B: Reverse DNS zone

C: Reverse DNS records

D: AD DS-integrated zones

Q2:
[Post-Deployment Management and Configuration]
What happens when the XDR Collector is uninstalled from an endpoint by using the Cortex XDR console?

A: The files are removed immediately, and the machine is deleted from the system without any retention period

B: The machine status remains active until manually removed, and the configuration data is retained for up to seven days

C: It is uninstalled during the next heartbeat communication, machine status changes to Uninstalled, and the configuration data is retained for 90 days

D: The associated configuration data is removed from the Action Center immediately after uninstallation

Q3:
[Dashboards and Reporting]
Which statement describes the functionality of fixed filters and dashboard drilldowns in enhancing a dashboard’s interactivity and data insights?

A: Fixed filters allow users to select predefined data values, while dashboard drilldowns enable users to alter the scope of the data displayed by selecting filter values from the dashboard header

B: Fixed filters limit the data visible in widgets, while dashboard drilldowns allow users to download data from the dashboard in various formats

C: Fixed filters let users select predefined or dynamic values to adjust the scope, while dashboard drilldowns provide interactive insights or trigger contextual changes, like linking to XQL searches

D: Fixed filters allow users to adjust the layout, while dashboard drilldowns provide links to external reports and/or dashboards

Q4:
[Planning and Installation]
During deployment of Cortex XDR for Linux Agents, the security engineering team is asked to implement memory monitoring for agent health monitoring. Which agent service should be monitored to fulfill this request?

A: dypdng

B: clad

C: pyxd

D: pmd

A: Apply an alert exception

B: Apply an alert exclusion to the XDR behavioral indicator of compromise (BIOC) alert

C: Apply an alert exclusion to the XDR agent alert

D: Modify the behavioral indicator of compromise (BIOC) logic

Testimonials – Real Results From Real Students

Frequently Asked Question (FAQ's)

Useful Links

Extra Links

info@prep2certs.com

Palo Alto Networks XDR-Engineer Exam Questions

Vendor

Exam Code

Exam Name

Exam Duration

Total Questions

PDF VERSION

DEMO QUESTIONS

Q1: [Planning and Installation]When using Kerberos as the authentication method for Pathfinder, which two settings must be validated on the DNS server? (Choose two.)

A: DNS forwarders

B: Reverse DNS zone

C: Reverse DNS records

D: AD DS-integrated zones

Q2: [Post-Deployment Management and Configuration]What happens when the XDR Collector is uninstalled from an endpoint by using the Cortex XDR console?

A: The files are removed immediately, and the machine is deleted from the system without any retention period

B: The machine status remains active until manually removed, and the configuration data is retained for up to seven days

C: It is uninstalled during the next heartbeat communication, machine status changes to Uninstalled, and the configuration data is retained for 90 days

D: The associated configuration data is removed from the Action Center immediately after uninstallation

Q3: [Dashboards and Reporting]Which statement describes the functionality of fixed filters and dashboard drilldowns in enhancing a dashboard’s interactivity and data insights?

A: Fixed filters allow users to select predefined data values, while dashboard drilldowns enable users to alter the scope of the data displayed by selecting filter values from the dashboard header

B: Fixed filters limit the data visible in widgets, while dashboard drilldowns allow users to download data from the dashboard in various formats

C: Fixed filters let users select predefined or dynamic values to adjust the scope, while dashboard drilldowns provide interactive insights or trigger contextual changes, like linking to XQL searches

D: Fixed filters allow users to adjust the layout, while dashboard drilldowns provide links to external reports and/or dashboards

Q4: [Planning and Installation]During deployment of Cortex XDR for Linux Agents, the security engineering team is asked to implement memory monitoring for agent health monitoring. Which agent service should be monitored to fulfill this request?

A: dypdng

B: clad

C: pyxd

D: pmd

A: Apply an alert exception

B: Apply an alert exclusion to the XDR behavioral indicator of compromise (BIOC) alert

C: Apply an alert exclusion to the XDR agent alert

D: Modify the behavioral indicator of compromise (BIOC) logic

Testimonials – Real Results From Real Students

Frequently Asked Question (FAQ's)

Useful Links

Extra Links

info@prep2certs.com

Q1:
[Planning and Installation]
When using Kerberos as the authentication method for Pathfinder, which two settings must be validated on the DNS server? (Choose two.)

Q2:
[Post-Deployment Management and Configuration]
What happens when the XDR Collector is uninstalled from an endpoint by using the Cortex XDR console?

Q3:
[Dashboards and Reporting]
Which statement describes the functionality of fixed filters and dashboard drilldowns in enhancing a dashboard’s interactivity and data insights?

Q4:
[Planning and Installation]
During deployment of Cortex XDR for Linux Agents, the security engineering team is asked to implement memory monitoring for agent health monitoring. Which agent service should be monitored to fulfill this request?