nerdexam
Palo_Alto_Networks

XDR-ANALYST · Question #60

What occurs if a lookup table referenced in an XQL query is deleted from Cortex XDR?

The correct answer is C. The query fails during execution. If a referenced lookup table no longer exists, Cortex XDR cannot resolve the query logic, causing the XQL query to fail during execution.

XQL and Query Investigation

Question

What occurs if a lookup table referenced in an XQL query is deleted from Cortex XDR?

Options

  • AThe query silently skips that reference
  • BCortex XDR raises an alert and substitutes a default table
  • CThe query fails during execution
  • DLookup values are cached from the previous run

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    76% (26)
  • D
    15% (5)

Explanation

If a referenced lookup table no longer exists, Cortex XDR cannot resolve the query logic, causing the XQL query to fail during execution.

Topics

#XQL queries#lookup tables#query execution#Cortex XDR

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice