Online Access Free XDR-Engineer Practice Test

During deployment of Cortex XDR for Linux Agents, the security engineering team is asked to implement memory monitoring for agent health monitoring. Which agent service should be monitored to fulfill this request?

• A.pyxd
• B.pmd
• C.dypdng
• D.clad

A query is created that will run weekly via API. After it is tested and ready, it is reviewed in the Query Center. Which available column should be checked to determine how many compute units will be used when the query is run?

• A.Simulated Compute Units
• B.Query Status
• C.Compute Unit Quota
• D.Compute Unit Usage

When using Kerberos as the authentication method for Pathfinder, which two settings must be validated on the DNS server? (Choose two.)

• A.DNS forwarders
• B.AD DS-integrated zones
• C.Reverse DNS records
• D.Reverse DNS zone

A mobile device management (MDM) system is configured per documentation, and after Cortex XDR agent deployment, many users show their operational status as "Partially Protected." What is a potential cause for this behavior?

• A.The Safari Safeguard module has not been enabled for all websites.
• B.The Network and EDR Security Module is not set to auto-detect malicious URL filtering.
• C.Affected users are still using the Default Malware Prevention Module on Policy.
• D.URL filtering is currently disabled on the Malware Prevention Module.

A threat hunter needs to correlate DNS queries, process executions, and network connections across historical telemetry using advanced search logic. Which feature should be used?

• A.XQL Search
• B.Incident Dashboard
• C.Asset Inventory
• D.Host Firewall Profiles