Exam XDR-Engineer Topic 3 Question 34 Discussion

Actual exam question for Palo Alto Networks's XDR-Engineer exam
Question #: 34
Topic #: 3
In addition to using valid authentication credentials, what is required to enable the setup of the Database Collector applet on the Broker VM to ingest database activity?

Suggested Answer: B Vote an answer

The Database Collector applet on the Broker VM is designed to ingest database activity monitoring data into Cortex XSIAM/XDR. Beyond providing valid authentication credentials to connect to the database, the collector specifically requires access to the database audit log - because that is the source from which database activity events (logins, queries, schema changes, privilege use, etc.) are read and forwarded.
The audit log is the structured record of database activity that the collector parses and ingests.
Without access to it, the applet has no activity data to collect, regardless of whether authentication succeeds.

by Sandra at Jun 20, 2026, 09:10 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10