What is the primary function of the 'Cortex XSIAM Agent' when installed on an endpoint?
Trap 1: To replace the need for network security
The agent complements network security, it does not replace it.
Trap 2: To store all log data locally on the host
Logs are streamed to the cloud, not stored long-term on the host.
Trap 3: To manage firewall rules on the local host
This is a secondary capability, not the primary XSIAM function.
- A
To replace the need for network security
Why wrong: The agent complements network security, it does not replace it.
- B
To store all log data locally on the host
Why wrong: Logs are streamed to the cloud, not stored long-term on the host.
- C
To collect data and provide endpoint protection
The agent serves as both an EDR/EPP tool and a data source.
- D
To manage firewall rules on the local host
Why wrong: This is a secondary capability, not the primary XSIAM function.