During Cortex XDR operations, an analyst must confirm version and content update impact before closing endpoint review during initial triage. Which concept or feature should they use?

Question

Accepted Answer

C. Agent update validation. Agent update validation is correct because the official Palo Alto Networks XDR Analyst datasheet maps it to agent version and content update. That makes it the best fit when the analyst needs to confirm version and content update impact before closing endpoint review during initial triage. Agent version is not correct because it addresses a different requirement within Endpoint Security Management.

During Cortex XDR operations, an analyst must confirm version and content update impact before closing endpoint review during initial triage. Which concept or feature should they use?

Related Questions

Discussion