Palo Alto Networks XSIAM Engineer — Question 39

When activating the Cortex XSIAM tenant, how is the data at rest configured with AES 128 encryption?

Answer options

• A. Under Advanced -> Encryption Method, choose the desired encryption method during the initial setup of the tenant.
• B. Under Advanced, choose "BYOK," and adhere to the wizard's instructions as outlined in the encryption method section.
• C. Create encryption keys with AES 128 and upload it securely through Cortex Gateway.
• D. Under Advanced -> Encryption Method, choose the desired encryption method after the initial setup of the tenant.

Correct answer: B

Explanation

The correct answer is B because selecting 'BYOK' allows you to follow the specific instructions provided in the wizard for configuring encryption. Option A is incorrect as it suggests choosing the method during setup rather than following the wizard's instructions. Option C is misleading since it implies creating and uploading keys rather than following the prescribed method. Option D is also incorrect as it suggests configuring encryption after setup, which does not align with the correct process.