5.1 Manage Cortex XDR Software Component Updates (e.g., Content, Agents, Collectors, Broker VM) XDR-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How can an administrator ensure data collection continuity during a Collector update?

   • APause all data collection until the update is complete
   • BIncrease the log storage capacity before the update
   • CUse a redundant Collector configuration to fail over during the update
   • DSchedule the update during a maintenance window when data collection is not critical
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   An administrator notices that a Cortex XDR agent update fails on several endpoints. What is a common cause for this failure?

   • AThe endpoints have too many installed applications
   • BThe endpoints are running an unsupported operating system version
   • CThe endpoints do not have enough RAM to run the new agent
   • DThe endpoints are connected to a slow network
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A Collector update fails on a system that also runs other critical services. The administrator needs to resolve the issue without affecting those services. What is the best approach?

   • AReboot the entire system to clear any issues.
   • BUninstall the Collector and reinstall it.
   • CRestart only the Collector service and check if it recovers.
   • DIgnore the failure and continue with other tasks.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security team needs to deploy a critical content update that requires agents to be on a minimum version. However, some agents are on an older version. The update is time-sensitive. What is the best approach?

   • ADeploy the content update to all agents, assuming the older agents will handle it.
   • BFirst update the older agents to the required version, then deploy the content update.
   • CRoll back the content update to a version that is compatible with all agents.
   • DDeploy the content update only to agents that meet the minimum version.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a recommended rollout strategy for deploying Cortex XDR agent updates to a large endpoint population?

   • ADeploy to all endpoints simultaneously to ensure consistency
   • BDeploy to endpoints with the highest risk first, then to the rest
   • CDeploy only to endpoints that have been offline for a long time
   • DDeploy to a small pilot group first, then gradually expand
   Reveal Solution Discussion Select an answer first