nerdexam
Palo_Alto_Networks

XDR-ENGINEER · Question #44

In addition to using valid authentication credentials, what is required to enable the setup of the Database Collector applet on the Broker VM to ingest database activity?

The correct answer is A. Valid SQL query targeting the desired data. Setting up the Database Collector applet requires a valid SQL query because the collector needs explicit instruction on which data to retrieve from the database - authentication alone grants access, but the SQL query defines the scope and target of the ingestion. Without a…

Deployment and Configuration

Question

In addition to using valid authentication credentials, what is required to enable the setup of the Database Collector applet on the Broker VM to ingest database activity?

Options

  • AValid SQL query targeting the desired data
  • BAccess to the database audit log
  • CDatabase schema exported in the correct format
  • DAccess to the database transaction log

How the community answered

(33 responses)
  • A
    88% (29)
  • B
    3% (1)
  • C
    6% (2)
  • D
    3% (1)

Explanation

Setting up the Database Collector applet requires a valid SQL query because the collector needs explicit instruction on which data to retrieve from the database - authentication alone grants access, but the SQL query defines the scope and target of the ingestion. Without a properly formed query, the applet has no mechanism to identify or extract the relevant database activity records.

Why the distractors are wrong:

  • B (Audit log access): The Database Collector uses SQL-based querying to pull activity data directly, not audit logs - audit log access is a separate monitoring approach.
  • C (Exported schema): Schema exports are used for database design/migration tasks, not for configuring a data ingestion collector.
  • D (Transaction log access): Transaction logs serve replication and recovery purposes; the collector does not read from transaction logs to ingest activity data.

Memory tip: Think of it as two keys to one door - credentials unlock the database, but the SQL query tells you which room to enter. You need both to successfully collect activity data.

Topics

#Database Collector#Broker VM#SQL query#database activity ingestion

Community Discussion

No community discussion yet for this question.

Full XDR-ENGINEER Practice