QuestionQ5

Cortex XSIAM

An organization needs a security solution that provides comprehensive threat visibility across its full digital ecosystem—including firewalls, cloud environments, and user-authentication logs—rather than only endpoint data.

Which Palo Alto Networks solution is best suited to satisfy this expanded requirement?

  • A Cortex endpoint protection platform (EPP)
  • B Cortex XDR
  • C Cortex Cloud Identity Engine
  • D Cortex XSIAM
Explanation

Cortex XSIAM centralizes and normalizes security telemetry from endpoints, firewalls and other network devices, cloud audit sources, identity systems, and third-party tools. Its onboarding guidance specifically covers next-generation firewall data, cloud audit logs, and identity/user data, making it the appropriate platform for full-ecosystem threat visibility rather than endpoint-focused protection.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!