XDR-Engineer Cortex XDR Agent Configuration Practice Question
An administrator is planning a Cortex XDR agent rollout across a mixed environment of Windows, macOS, and Linux servers. Which TWO key prerequisites must be verified prior to deployment? (Choose two)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ensure outbound TCP port 443 communication is allowed from endpoints to the Cortex XDR server or Broker VM.
Administrators must verify operating system version compatibility and ensure that necessary network outbound connectivity (port 443 to the Cortex XDR tenant/Broker VM) is open.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Ensure outbound TCP port 443 communication is allowed from endpoints to the Cortex XDR server or Broker VM.
Why this is correct
Agents require outbound HTTPS connectivity to communicate with the management console and report telemetry.
- ✗
Configure an external Syslog server to receive local agent installation logs.
Why it's wrong here
An external Syslog server is not a prerequisite for agent deployment.
- ✓
Verify that target operating system versions are supported in the current Cortex XDR release notes.
Why this is correct
Ensuring OS version compatibility is critical to prevent installation failures or kernel panics.
- ✗
Uninstall all native operating system firewalls before running the agent installer.
Why it's wrong here
Native firewalls do not need to be uninstalled; Cortex XDR coexists with standard OS firewalls.
- ✗
Manually compile the kernel headers on every target Windows endpoint.
Why it's wrong here
Kernel header compilation is relevant only for certain Linux distributions, not Windows.
About these practice questions
Courseiva writes every XDR-Engineer question from scratch — 226 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This XDR-Engineer practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XDR-Engineer exam.