XDR-ENGINEER practice question 2 of 10
[Cortex XDR Agent Configuration] A static endpoint group is created by adding 321 endpoints using the Upload From File feature. However, after group creation, the members count field shows 244 endpoints. What are two possible reasons why endpoints were not added to the group? (Choose two.)
Full set: 50 questionsWhen creating a static group by uploading a file, Cortex XDR attempts to match each entry (hostname, IP, or alias) in the file to an agent that has previously registered with the tenant. If an entry does not correspond to any known agent, it will be ignored. Similarly, if an agent has been uninstalled, its status becomes "Disconnected," and it is no longer a manageable endpoint. Such endpoints from the list would also fail to be added to the group.
A. Static groups support up to 50,000 endpoints; a limit of 250 is incorrect.
B. Endpoints can belong to multiple static groups simultaneously, so being in an existing group is not a reason for exclusion.
Palo Alto Networks Cortex XDR Administrator's Guide. "Create a Static Group of Endpoints." The documentation states, "Cortex XDR adds only endpoints that are already registered with Cortex XDR and that match the endpoint names, IP addresses, or aliases in the file." This directly supports option D.
Palo Alto Networks Cortex XDR Administrator's Guide. "Endpoint Statuses." The "Disconnected" status is defined for agents that have been uninstalled. An uninstalled agent is no longer managed and cannot be added to a group, supporting option C.
Keep practicing
Take the free XDR-ENGINEER practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other XDR-ENGINEER practice questions
- Question 1[Maintenance and Troubleshooting] A query is created that will run weekly via API. After …
- Question 3[Detection Engineering] An XDR engineer is creating a correlation rule to monitor login a…
- Question 4[Data Ingestion and Integration] A multinational company with over 300,000 employees has …
- Question 5[Data Ingestion and Integration] What is a benefit of ingesting and forwarding Palo Alto …
- Question 7[Data Ingestion and Integration] An administrator wants to employ reusable rules within c…
- Question 8[Detection Engineering] What will enable a custom prevention rule to block specific behav…
