View all questions & answers for the Palo Alto Networks Security Operations Professional (SecOps-Pro) Exam Materials exam

Palo Alto Networks Security Operations Professional (SecOps-Pro) Exam Materials - Question #15 Discussion

Comment Image Comment Image Comment Image

With a Windows endpoint, what is required to remove the Cortex XDR agent when the endpoint is no longer online and cannot be managed directly from the management console? (Choose one answer)

  • A. A Cortex XDR administrator must provide the end user with an offline removal tool created in the management console.
  • B. An administrator must disable the agent by opening the agent console from the system tray and entering * a password.
  • C. When running the uninstaller, the administrator must enter an uninstall password from the management console.
  • D. An administrator must use Cytool to disable security protection on the endpoint with an uninstall password.
Correct Answer: C

Brave-Dump Community Votes

Answer: C (1 vote) 50%
Answer: D (1 vote) 50%

Community Explanations & Comments (2)

Brave-Dumps.com Admin 5 months ago
Selected: C
It needs additional check from our experts
Chiheb Ouaghlani 3 months ago
Selected: D
It's D :
To remove a Cortex XDR agent from a Windows endpoint that is offline and cannot be managed via the management console, the administrator must use the Cytool utility and provide an uninstall password.

Cytool is the command-line utility used for managing and troubleshooting the Cortex XDR agent locally on an endpoint.

When a password is required for uninstallation (often configured in the agent settings for security), that same password must be provided when running the uninstall command via Cytool.