XDR-ENGINEER practice question 1 of 10

[Maintenance and Troubleshooting] A query is created that will run weekly via API. After it is tested and ready, it is reviewed in the Query Center. Which available column should be checked to determine how many compute units will be used when the query is run?

Full set: 50 questions
Answer options
A: Query Status
B: Compute Unit Usage
C: Simulated Compute Units Correct answer
D: Compute Unit Quota
Correct Answer:
C. Simulated Compute Units
Explanation

The "Simulated Compute Units" column in the Query Center shows the estimated compute units that will be consumed when a query runs. This simulation is based on the query complexity and expected data volume, providing administrators with a preview of resource consumption before actual execution. This is particularly important for scheduled API queries to ensure they won't exceed quotas or consume excessive resources.

Why Incorrect

A. Query Status - Shows execution state (running, completed, failed), not resource consumption estimates.
B. Compute Unit Usage - Shows actual historical usage after query execution, not future estimates.
D. Compute Unit Quota - Displays allocated limits, not specific query consumption predictions.

References

1. Palo Alto Networks Cortex XDR Administrator's Guide, "Query Center Overview" section, pages 245-248

2. Cortex XDR API Reference Documentation, "Query Management and Resource Planning" chapter, sections 4.2-4.3

3. Palo Alto Networks Technical Documentation, "XDR Analytics and Compute Units," Document ID: PAN-148392, pages 12-15

Scroll to Top