Palo_Alto_Networks
SECOPS-PRO · Question #60
What is required to enable ingestion of on-premises firewall logs into Cortex XDR?
The correct answer is A. Broker VM. A Broker VM is required to collect and forward on-premises firewall logs to Cortex XDR for ingestion and analysis.
Data Integration and Log Management
Question
What is required to enable ingestion of on-premises firewall logs into Cortex XDR?
Options
- ABroker VM
- BAPI
- CPAN-OS content pack
- DCloud Identity Engine
How the community answered
(31 responses)- A74% (23)
- B13% (4)
- C3% (1)
- D10% (3)
Explanation
A Broker VM is required to collect and forward on-premises firewall logs to Cortex XDR for ingestion and analysis.
Topics
#Cortex XDR#Broker VM#log ingestion#on-premises integration
Community Discussion
No community discussion yet for this question.