Palo Alto Networks XSIAM Engineer — Question 23

When Cortex XDR agents are on servers in a zone with no internet access, which configuration will keep them communicating with the platform?

Answer options

• A. Logging service in the isolated zone
• B. Broker VM
• C. Integration using filebeat
• D. Engine

Correct answer: B

Explanation

The Broker VM acts as an intermediary that facilitates communication between Cortex XDR agents and the platform in an isolated environment. The other options, such as the Logging service, do not provide the necessary connectivity to the platform, while filebeat is used for log shipping, and Engine refers to processing rather than communication.