Palo Alto Networks Exam XDR-Engineer Topic 4 Question 1 Discussion

Actual exam question for Palo Alto Networks's XDR-Engineer exam

Question #: 1
Topic #: 4

[Cortex XDR Agent Configuration]

Multiple remote desktop users complain of in-house applications no longer working. The team uses macOS with Cortex XDR agents version 8.7.0, and the applications were previously allowed by disable prevention rules attached to the Exceptions Profile "Engineer-Mac." Based on the images below, what is a reason for this behavior?

AEndpoint IP address changed from 192.168.0.0 range to 192.168.100.0 range

BThe Cloud Identity Engine is disconnected or removed

CXDR agent version was downgraded from 8.7.0 to 8.4.0

DInstallation type changed from VDI to Kubernetes

Show Suggested Answer

Suggested Answer: A

by Roslyn at Jun 12, 2025, 08:43 PM

Limited Time Offer

25%

Off

Get Premium XDR-Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Anglea

2 days ago

Installation type changing from VDI to Kubernetes? That's a bit of a stretch, don't you think? I bet the IT team is just having a 'Kubernetes day' and trying to blame it on that.

upvoted 0 times

...

Jaime

3 days ago

Downgrading the XDR agent version from 8.7.0 to 8.4.0 would be my guess. Those version changes can sometimes break compatibility with certain apps.

upvoted 0 times

...

Barbra

5 days ago

Hmm, the Cloud Identity Engine being disconnected or removed could definitely cause this problem. I wonder if the IT team forgot to update the configuration after making that change.

upvoted 0 times

...

Georgene

7 days ago

The endpoint IP address change from 192.168.0.0 to 192.168.100.0 range seems like the most likely reason. The applications were previously allowed by the Exceptions Profile, so that shouldn't be the issue.

upvoted 0 times

...