View all questions & answers for the Palo Alto Networks Security Operations Professional (SecOps-Pro) Exam Materials exam

Palo Alto Networks Security Operations Professional (SecOps-Pro) Exam Materials-Question 15 Discussion

With a Windows endpoint, what is required to remove the Cortex XDR agent when the endpoint is no longer online and cannot be managed directly from the management console? (Choose one answer)

A. A Cortex XDR administrator must provide the end user with an offline removal tool created in the management console.
B. An administrator must disable the agent by opening the agent console from the system tray and entering * a password.
C. When running the uninstaller, the administrator must enter an uninstall password from the management console.
D. An administrator must use Cytool to disable security protection on the endpoint with an uninstall password.

Correct Answer: C

Brave-Dump Clients Votes

C 50%

D 50%

Comments

Brave-Dumps.com Admin 2026-05-03 22:31:05

Selected Answers: C

It needs additional check from our experts

Chiheb Ouaghlani 2026-07-13 12:08:46

Selected Answers: D

It's D :
To remove a Cortex XDR agent from a Windows endpoint that is offline and cannot be managed via the management console, the administrator must use the Cytool utility and provide an uninstall password.

Cytool is the command-line utility used for managing and troubleshooting the Cortex XDR agent locally on an endpoint.

When a password is required for uninstallation (often configured in the agent settings for security), that same password must be provided when running the uninstall command via Cytool.