Palo Alto Networks XSIAM Engineer — Question 2

A Cortex XSIAM engineer plans to add Kafka and Syslog Collectors to a Broker VM cluster.
What are two expected behaviors of the applets when they are added to the cluster? (Choose two.)

Answer options

• A. Syslog Collector applet is automatically initiated, enters an active state on the primary node, and is on standby on the standby nodes.
• B. Kafka Collector applet is automatically initiated, enters an active state on the primary node, and is on standby on the standby nodes.
• C. Syslog Collector applet is active on all cluster nodes, including primary and standby.
• D. Kafka Collector applet is active on all cluster nodes, including primary and standby.

Correct answer: A, D

Explanation

The correct answer includes A and D because the Syslog Collector applet is designed to be active on the primary node and enter standby mode on the others, while the Kafka Collector applet is also expected to be active on all cluster nodes. Options B and C are incorrect as they do not accurately describe the expected behavior of the applets in the cluster setup.