XDR-Engineer Planning And Installation Practice Question
An administrator is preparing to deploy Cortex XDR agents in a hardened enterprise environment with strict endpoint security controls. Which TWO actions should the administrator perform on the endpoints to prevent interference with agent installation and operation? (Choose two)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ensure the account performing the installation possesses local Administrator or root privileges
Deploying Cortex XDR in hardened environments requires ensuring third-party security software (like legacy AV) is uninstalled or properly excluded, and making sure necessary OS permissions are intact.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Format all local hard drives with FAT32 to ensure compatibility with Cortex XDR telemetry databases
Why it's wrong here
FAT32 lacks security permissions (ACLs) and is unsupported for modern enterprise endpoints.
- ✗
Disable Windows User Account Control (UAC) by modifying the hardware BIOS settings
Why it's wrong here
UAC is an operating system feature managed in the Windows Registry, not in the hardware BIOS.
- ✓
Ensure the account performing the installation possesses local Administrator or root privileges
Why this is correct
Installing system-level security software, drivers, and services requires elevated administrative privileges.
- ✓
Uninstall or properly configure exclusions in existing legacy antivirus software to prevent conflicts
Why this is correct
Running multiple kernel-level security agents simultaneously can cause system instability and conflicts; legacy AV should be uninstalled or excluded.
- ✗
Disable all local Windows firewall rules and delete the TCP/IP stack registry keys
Why it's wrong here
Disabling the TCP/IP stack breaks all network communication.
About these practice questions
Courseiva writes every XDR-Engineer question from scratch — 226 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This XDR-Engineer practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XDR-Engineer exam.