Palo Alto Networks System Engineer – Cortex — Question 47

What must a customer deploy prior to collecting endpoint data in Cortex XSIAM?

Answer options

• A. Playbook
• B. Broker VM
• C. XDR agent
• D. External dynamic list

Correct answer: C

Explanation

The correct answer is C, the XDR agent, as it is essential for collecting endpoint data in Cortex XSIAM. The other options, such as Playbook and Broker VM, are not prerequisites for data collection and serve different functions within the Cortex XSIAM environment.