| Exam Name: | Palo Alto Networks XSIAM Engineer | ||
| Exam Code: | XSIAM-Engineer Dumps | ||
| Vendor: | Paloalto Networks | Certification: | Security Operations |
| Questions: | 59 Q&A's | Shared By: | deacon |
A Cortex XDR agent is installed on an endpoint, but the agent is unable to download content updates and has not registered with the Cortex XSIAM server. An engineer troubleshoots the network connection and determines that, by design, this endpoint does not have direct internet access to the required network destinations for the Cortex XDR agent traffic.
A Broker VM that has the local agent settings applet enabled with Agent Proxy configured is reachable by the endpoint. The Broker VM details are as follows:
FQDN: crtxbroker01.company.net
Proxy listening port: 8888
How should the engineer configure the Cortex XDR agent to use the existing Broker VM as a proxy for the agent network traffic?
In which two locations can correlation rules be monitored for errors? (Choose two.)
What is the primary benefit of setting the "--memory-swap" option to "-1" during Cortex XSIAM engine deployment?
Which action is required to enable use of a custom script in an alert layout?
TESTED 05 Oct 2026
