Exam XSIAM-Engineer Topic 3 Question 86 Discussion

Actual exam question for Palo Alto Networks's XSIAM-Engineer exam
Question #: 86
Topic #: 3

A company is planning to integrate XSIAM with its highly customized CMDB, which runs on a legacy database system without a modern API. The CMDB contains critical asset metadata (e.g., owner, criticality, patching status) that XSIAM needs for accurate alert context and prioritization. Given the constraints, what is the most effective and maintainable integration strategy?

A. Develop a custom ETL process that periodically extracts data from the legacy CMDB, transforms it, and loads it into a format ingestible by a XSIAM Data Collector (e.g., JSON, CSV over SFTP). B. Implement direct database connectivity from a XSIAM Data Collector to the legacy CMDB, ensuring proper firewall rules and credentials. C. Require the CMDB vendor to develop a modern API for XSIAM integration. D. Manually update XSIAM lookup lists with CMDB data on a daily basis. E. Use a generic syslog forwarder to send raw database logs to XSIAM.

Suggested Answer: A Vote an answer

Given a legacy CMDB without a modern API, a custom ETL process (Option A) is the most effective and maintainable solution. It allows for data transformation, error handling, and provides a controlled ingestion pipeline into XSIAM without direct database exposure from XSIAM. Option B, direct database connectivity, is generally not recommended due to security and performance implications. Option C is unrealistic for an immediate deployment. Option D is manual and not scalable. Option E would send raw database logs, which is not suitable for enriching XSIAM alerts with structured CMDB data.

by Laura at Aug 26, 2026, 01:46 PM

Limited Time Offer

15%

Off

Get Premium XSIAM-Engineer Questions as Interactive Self Test Engine or PDF

Comments

0 Happy Clients

0 Shares

0 Demo Downloads

10 Years in Business