Palo Alto Networks XSIAM Engineer — Question 3

A Cortex XDR agent is installed on an endpoint, but the agent is unable to download content updates and has not registered with the Cortex XSIAM server. An engineer troubleshoots the network connection and determines that, by design, this endpoint does not have direct internet access to the required network destinations for the Cortex XDR agent traffic.
A Broker VM that has the local agent settings applet enabled with Agent Proxy configured is reachable by the endpoint. The Broker VM details are as follows:

FQDN: crtxbroker01.company.net -

Proxy listening port: 8888 -
How should the engineer configure the Cortex XDR agent to use the existing Broker VM as a proxy for the agent network traffic?

Answer options

• A. cytool proxy set "crtxbroker01. company.net: 8888"
• B. cytool config proxy --host crtxbroker01.company.net --port 8888
• C. cytool set proxy --host crtxbroker01.company.net --port 8888
• D. cytool proxy config "crtxbroker01.company.net:8888"

Correct answer: B

Explanation

The correct answer is B because it uses the appropriate command syntax for configuring the proxy settings with the specified host and port. Option A is incorrect because it uses the wrong command structure. Option C is not valid as it lacks the correct command for configuring the proxy. Option D is incorrect due to improper command usage for setting the proxy configuration.