Exam XDR-Engineer Topic 3 Question 34 Discussion
Actual exam question for Palo Alto Networks's XDR-Engineer exam
Question #: 34
Topic #: 3
Question #: 34
Topic #: 3
In addition to using valid authentication credentials, what is required to enable the setup of the Database Collector applet on the Broker VM to ingest database activity?
Suggested Answer: B Vote an answer
The Database Collector applet on the Broker VM is designed to ingest database activity monitoring data into Cortex XSIAM/XDR. Beyond providing valid authentication credentials to connect to the database, the collector specifically requires access to the database audit log - because that is the source from which database activity events (logins, queries, schema changes, privilege use, etc.) are read and forwarded.
The audit log is the structured record of database activity that the collector parses and ingests.
Without access to it, the applet has no activity data to collect, regardless of whether authentication succeeds.
The audit log is the structured record of database activity that the collector parses and ingests.
Without access to it, the applet has no activity data to collect, regardless of whether authentication succeeds.
by Sandra at Jun 20, 2026, 09:10 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).