Palo Alto Networks Security Operations Professional — Question 3

Which sensor is used by Cortex XSIAM to identify and collect DNS queries, HTTP header, and DHCP information?

Answer options

• A. Windows Event Collector logs
• B. Directory Sync logs
• C. Pathfinder data collector
• D. Enhanced application logs

Correct answer: C

Explanation

The correct answer is C, the Pathfinder data collector, as it is specifically designed to capture and compile DNS queries, HTTP headers, and DHCP information. Options A and B do not relate to the collection of this specific data, while option D focuses on application logs, which are also not suited for this purpose.