Exam XSIAM-Engineer Topic 3 Question 15 Discussion

Actual exam question for Palo Alto Networks's XSIAM-Engineer exam
Question #: 15
Topic #: 3
Based on the _raw_log and XQL query information below, what will be the result(s) of the temp_value?

Suggested Answer: A Vote an answer

The XQL query uses regextract with conditions to check if the source IP begins with 149.235. When true, it assigns the replacement value 192.168.10.1, otherwise it extracts the source port. From the given logs, this produces 123 (from the port extraction in the second log) and 192.168.10.1 (replacement for the first log's matching source IP).

by Joanne at Jun 12, 2026, 12:07 PM

Limited Time Offer

15%

Off

Get Premium XSIAM-Engineer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10