XDR-Engineer Maintenance And Troubleshooting Practice Question
An administrator needs to troubleshoot an endpoint where the Cortex XDR agent has been tampered with or corrupted. Which TWO actions can the administrator take to repair or reinstall the agent safely? (Choose two)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Uninstall the agent using the console-generated uninstallation password, then perform a clean reinstallation using the latest installer package.
Repairing or reinstalling a tampered agent requires using the uninstallation password and official installation packages.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Format the endpoint hard drive and restore from a factory image.
Why it's wrong here
Formatting is unnecessary for agent corruption issues that can be resolved via standard uninstall/reinstall procedures.
- ✗
Delete the agent folder manually in Program Files without using the uninstaller.
Why it's wrong here
Manual deletion leaves registry keys, drivers, and services corrupted, preventing successful reinstallation.
- ✗
Force an overwrite installation without uninstalling by modifying Windows Group Policy.
Why it's wrong here
Overwriting a corrupted agent without cleaning up anti-tamper hooks typically fails.
- ✓
Uninstall the agent using the console-generated uninstallation password, then perform a clean reinstallation using the latest installer package.
Why this is correct
A clean uninstall with the correct password followed by a fresh install resolves corruption and tampering issues.
- ✓
Use 'cytool' with the appropriate maintenance password to reset corrupted agent database files and restore default settings.
Why this is correct
cytool allows resetting databases or managing agent states when authenticated with maintenance credentials.
About these practice questions
Courseiva writes every XDR-Engineer question from scratch — 226 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This XDR-Engineer practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XDR-Engineer exam.