XSIAM-Engineer Operations And Lifecycle Management Practice Question
An administrator is configuring a new syslog ingestion source on a Broker VM. The syslog messages use TCP with TLS encryption (Reliable Syslog). Where must the corresponding TLS server certificates for the Broker VM be configured?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure the TLS server certificates and listener ports within the Broker VM configuration settings in the XSIAM console.
Broker VM TLS listener certificates for secure syslog ingestion are configured within the Broker VM configuration settings in the XSIAM management console.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Upload the certificates into the Cortex XDR Agent policy assigned to workstations.
Why it's wrong here
Incorrect. Workstation agent policies do not manage Broker VM syslog listener certificates.
- ✓
Configure the TLS server certificates and listener ports within the Broker VM configuration settings in the XSIAM console.
Why this is correct
Correct. Secure syslog listener certificates and ports are managed via Broker VM configurations in XSIAM.
- ✗
Store the certificates in the browser's local storage cache.
Why it's wrong here
Incorrect. Browser storage does not configure server-side ingestion certificates.
- ✗
Paste the certificates into the XQL query editor console.
Why it's wrong here
Incorrect. The XQL query editor is for searching logs, not configuring ingestion certificates.
About these practice questions
One of 200 original XSIAM-Engineer practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This XSIAM-Engineer practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XSIAM-Engineer exam.