Palo Alto Networks XSIAM Engineer — Question 10

How must Cloud Identity Engine be deployed and activated on Cortex XSIAM?

Answer options

• A. In a different region than Cortex XSIAM; logs can be verified using pan_dss_raw dataset
• B. In a different region than Cortex XSIAM; logs can be verified using endpoints dataset
• C. In the same region as Cortex XSIAM; logs can be verified using pan_dss_raw dataset
• D. In the same region as Cortex XSIAM; logs can be verified using endpoints dataset

Correct answer: C

Explanation

The correct answer is C because Cloud Identity Engine needs to be deployed in the same region as Cortex XSIAM to ensure proper functionality and data consistency. Options A and B are incorrect as they suggest deployment in a different region, which would not work correctly. Option D is incorrect because, while it is in the same region, it uses the wrong dataset for log verification.