When a PingAccess agent is compromised, the secure approach is to invalidate the existing credentials and issue a new configuration file from the PingAccess Admin Console. This provides a fresh agent.properties file with new secrets, ensuring compromised keys cannot be reused.

Exact Extract:

''If an agent is compromised, revoke and regenerate the agent configuration by downloading a new agent.properties file from the administrative console.''

Option A is incorrect --- manually changing the secret in the file does not propagate it to PingAccess.

Option B is incorrect --- trusted certificates are not tied to agent authentication.

Option C is unnecessary --- reinstalling the agent does not reset credentials.

Option D is correct --- downloading a new agent.properties file re-secures the agent.