XDR-ENGINEER: Palo Alto Networks Certified XDR EngineerDemo

By Palo Alto Networks · Question Mode

QuestionQ1

Ingestion and Automation

How can a customer ingest extra events from a Windows DHCP server into Cortex XDR with minimal configuration?

  • A Install the XDR Collector.
  • B Enable HTTP collector integration.
  • C Activate Windows Event Collector (WEC).
  • D Install the Cortex XDR agent.
Explanation

Cortex XDR supports Windows DHCP log ingestion through an XDR Collector that uses Elasticsearch Filebeat and the Windows DHCP data source. Cortex XDR provides DHCP configuration templates for Windows collector profiles, making this the appropriate low-configuration ingestion method.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!