Palo_Alto_Networks
PSE-CORTEX · Question #149
PSE-CORTEX Question #149: Real Exam Question with Answer & Explanation
The correct answer is C. Ask the customer for average log ingestion estimates from their existing SIEM.. See the full explanation below for the reasoning.
Question
How can the required log ingestion license be determined when sizing a Cortex XSIAM deployment?
Options
- AUse the Cortex Data Lake Calculator to estimate the volume of third-party logs.
- BCount the number of correlation sources and multiply by desired retention days.
- CAsk the customer for average log ingestion estimates from their existing SIEM.
- DAsk the customer to provide average daily alert volume.
Community Discussion
No community discussion yet for this question.