Palo Alto Networks System Engineer – Cortex — Question 69

What is the requirement for enablement of endpoint and network analytics in Cortex XDR?

Answer options

• A. Cloud Identity Engine configured and enabled
• B. Network Mapper applet on the Broker VM configured and enabled
• C. Logs from at least 30 endpoints over a minimum of two weeks
• D. Windows DHCP logs ingested via a Cortex XDR collector

Correct answer: C

Explanation

The correct answer is C because it specifies the need for logs from a sufficient number of endpoints over a designated time frame, which is essential for accurate analytics. Options A, B, and D do not meet the specific logging requirement needed for enabling these analytics features.