Palo Alto Networks XSIAM-Engineer Exam - Topic 4 Question 4 Discussion

Actual exam question for Palo Alto Networks's XSIAM-Engineer exam

Question #: 4
Topic #: 4

Which two requirements must be met for a Cortex XDR agent to successfully use the Broker VM as a download source for content updates? (Choose two.)

ADevice Configuration profile applied to the XDR agent must specify the Broker VM as a Download Source.

BAgent Settings profile applied to the XDR agent must specify the Broker VM as a Download Source.

CBroker VM must be configured with an FQDN.

DXDR agent must authenticate to the Broker VM using a machine certificate.\

Show Suggested Answer

Suggested Answer: B, C

For Cortex XDR agents to use the Broker VM as a download source, the Agent Settings profile must specify the Broker VM as the update source, and the Broker VM must be configured with an FQDN so agents can reliably resolve and connect to it.

by Veta at Nov 26, 2025, 01:28 AM

Limited Time Offer

25%

Off

Get Premium XSIAM-Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Adolph

3 days ago

I agree with A and D. Security is key!

upvoted 0 times

...

Lorrie

9 days ago

D is crucial for authentication. Can't skip that.

upvoted 0 times

...

Owen

14 days ago

I’m leaning towards B. It makes sense for settings.

upvoted 0 times

...

Mozell

19 days ago

A is definitely one. C seems right too.

upvoted 0 times

...

Clarinda

24 days ago

Really? I feel it's B and D.

upvoted 0 times

...

Darnell

29 days ago

Wait, does the Broker VM really need an FQDN?

upvoted 0 times

...

Xochitl

2 months ago

Definitely A and C, no doubt.

upvoted 0 times

...

Fletcher

2 months ago

I thought it was B and D!

upvoted 0 times

...

Josefa

2 months ago

A and C are the right answers.

upvoted 0 times

...

Carolann

2 months ago

I'm going with A and D. Gotta love those Cortex XDR agent requirements!

upvoted 0 times

...

Lakeesha

2 months ago

Haha, the Broker VM needs an FQDN? What is this, the 90s?

upvoted 0 times

...

Lorrine

2 months ago

Definitely A and D, the agent needs to be configured to use the Broker VM as a download source and authenticate with a machine certificate.

upvoted 0 times

...

Alida

3 months ago

I’m pretty confident that the XDR agent needs to authenticate with a machine certificate, but I’m not clear on whether the FQDN is mandatory.

upvoted 0 times

...

Olive

3 months ago

This question feels familiar; I think both profiles need to specify the Broker VM, but I might be mixing it up with another practice question.

upvoted 0 times

...

Johnetta

3 months ago

I remember something about needing an FQDN for the Broker VM, but I can't recall if the authentication method is also necessary.

upvoted 0 times

...

Luisa

3 months ago

I've got this! The agent settings profile needs to specify the Broker VM as the download source, and the agent needs to authenticate to the Broker VM using a machine certificate. Easy peasy!

upvoted 0 times

...

Luke

3 months ago

Okay, let me think this through. The Broker VM needs to be configured with an FQDN, so that's definitely one requirement. And the agent needs to authenticate to the Broker VM, so that's the other one. I'm pretty confident those are the two correct answers.

upvoted 0 times

...

Natalie

3 months ago

I'm a bit confused on this one. I know the Broker VM is used for content updates, but I'm not sure about the specific requirements. I'll need to review the material on Cortex XDR agents and Broker VMs again to make sure I understand this properly.

upvoted 0 times

...

Alesia

4 months ago

I think it's A and C.

upvoted 0 times

...

Daniela

4 months ago

I think B and C are the right options.

upvoted 0 times

...

Trina

4 months ago

I think the Device Configuration profile needs to specify the Broker VM as a download source, but I'm not entirely sure about the Agent Settings profile.

upvoted 0 times

...

Melissa

4 months ago

I agree, A and C make the most sense!

upvoted 0 times

...

Haydee

4 months ago

A and D are the correct answers.

upvoted 0 times

...

Alberta

5 months ago

Hmm, this seems pretty straightforward. I'm pretty sure the answer is A and D, since the agent needs to be configured to use the Broker VM as the download source, and it needs to authenticate to the Broker VM using a certificate.

upvoted 0 times

...

Trina

5 months ago

I think the key here is to focus on the requirements for the Broker VM to be used as a download source. The question is asking about two specific requirements, so I'll need to carefully consider the options provided.

upvoted 0 times

...