Courseiva
Free · No account needed · No credit card

Certified XDR Engineer (XDR-Engineer) Practice Test

275 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.

Instant feedback after each answer
Full explanations included
Domain score breakdown
Pass mark: 860 (scaled 300–1,000)

Sample questions with explanations

This is exactly what you see during practice — question, options, and a full explanation after you answer.

Q1Cortex XDR Agent Configurationeasy
Full explanation →

When installing the Cortex XDR agent on a macOS endpoint, which additional operating system configuration must be completed to ensure full visibility and prevention capabilities?

ADisable SIP (System Integrity Protection).
BConfigure a custom kernel panic handler in the boot-args.
Approve Full Disk Access and System Extensions.Correct
DInstall a local proxy certificate in the Keychain Access utility.

macOS requires the administrator to manually approve System Extensions and Full Disk Access permissions for the Cortex XDR agent to function correctly.

Q2Cortex XDR Agent Configurationeasy
Full explanation →

Which command-line utility can an administrator use on a Windows endpoint to check the status, connection state, and version of an installed Cortex XDR agent?

Axdr-cli
Btraps-cli
cytoolCorrect
Dpan-agent-ctl

The cytool utility is the command-line interface on Windows endpoints for querying and managing the Cortex XDR agent. Running commands such as 'cytool status' or 'cytool info' displays the agent's operational status, connection state to the management server, and installed versio…Read full explanation

Q3Cortex XDR Agent Configurationmedium
Full explanation →

An administrator wants to ensure that Cortex XDR agent logs are automatically uploaded to the Cortex XDR server for troubleshooting without manual intervention. Which profile governs log collection and forwarding behaviors?

AExploit Protection profile
Data Collection profileCorrect
CAgent Settings profile
DBiometric Threat Prevention profile

The Data Collection profile dictates what telemetry, logs, and files are gathered and sent from the endpoint to the Cortex XDR backend.

What's covered

Questions are tagged by exam domain. Practice a specific domain or mix them all.

Untimed Practice

Answer at your own pace. Explanation and domain tag shown immediately after each answer.

Timed Practice

Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.

Why practice here?

Full explanations on every question

Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.

Domain score breakdown

After each session see your score by exam domain so you know exactly where to focus study time.

100% free, forever

No subscription, no trial, no email wall. Start a session in under 10 seconds.

Exam-style questions

Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.

← All XDR-Engineer questionsXDR-Engineer exam guideStudy guidePractice by domain