Which process is used to update the Cortex XDR agent to a newer version on an endpoint?

Rebuild the endpoint from scratch and install the new agent

Wait for the agent to self-update automatically without any action

Run the new installer over the existing agent, which performs an in-place upgrade

Uninstall the old agent and then install the new version manually

A security team is managing a large fleet of endpoints with the Cortex XDR agent. They want to ensure that all endpoints are running the latest security policy and that any endpoints that are not compliant are identified quickly. What is the best way to achieve this?

Manually check the policy version on each endpoint using the agent's local interface.

Use a mass deployment tool to push the latest policy to all endpoints.

Create a script that checks the policy version on each endpoint and reports any discrepancies.

Use the Cortex XDR console's policy monitoring features to view the policy version of each endpoint and set up alerts for endpoints that are not running the latest policy.

Which method is the standard way to uninstall the Cortex XDR agent from a Windows endpoint?

Run a script that kills the agent process and removes its services

Use the Windows Control Panel's 'Add or Remove Programs' feature

Use the Cortex XDR console to remotely delete the agent

Delete the agent's installation folder from the file system

A security analyst is investigating why a specific endpoint is not receiving policy updates from the Cortex XDR console. The endpoint shows as 'connected' but the policy version is outdated. What is the most likely cause?

The Cortex XDR console is not configured to push policy updates automatically.

The endpoint's network connectivity is intermittent.

The endpoint's agent is not running the latest version.

The endpoint is not a member of the group that the policy is assigned to.

Which action in the Cortex XDR console allows an administrator to apply a specific policy to a group of endpoints?

Creating a new agent installation package

Editing the agent's local registry settings

Configuring the Cortex XDR cloud's global settings

Assigning the policy to the endpoint group

Palo Alto NetworksCertified Security Operations Professional

Domain 3Objective 2

3.2 Explain the Process of Agent Management and Deployment, Including Cloud Workloads SECURITY-OPERATIONS-PROFESSIONAL Practice Questions (Page 1)

Part of the Cortex XDR domain, which accounts for 23% of the SECURITY-OPERATIONS-PROFESSIONAL exam.

20questions here

4free pages

6concepts

23%of the exam

Questions 1–5

1foundation · easy
Which process is used to update the Cortex XDR agent to a newer version on an endpoint?
Select an answer first
2expert · medium
A security team is managing a large fleet of endpoints with the Cortex XDR agent. They want to ensure that all endpoints are running the latest security policy and that any endpoints that are not compliant are identified quickly. What is the best way to achieve this?
Select an answer first
3foundation · easy
Which method is the standard way to uninstall the Cortex XDR agent from a Windows endpoint?
Select an answer first
4expert · medium
A security analyst is investigating why a specific endpoint is not receiving policy updates from the Cortex XDR console. The endpoint shows as 'connected' but the policy version is outdated. What is the most likely cause?
Select an answer first
5foundation · easy
Which action in the Cortex XDR console allows an administrator to apply a specific policy to a group of endpoints?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “SECURITY-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.