Live Terminal uses which type of protocol to communicate with the agent on the endpoint?

The correct answer is B. WebSocket. Cortex XDR Live Terminal uses the WebSocket protocol to establish a real-time, bidirectional communication channel between the Cortex XDR console and the agent on the endpoint. WebSocket is well-suited for this use case because it maintains a persistent connection over a single T

Submitted by andres_qro· Apr 18, 2026Cortex XDR Architecture and Agent Deployment

Question

Options

ANetBIOS over TCP
BWebSocket
CUDP and a random port
DTCP, over port 80

How the community answered

(49 responses)

B
94% (46)
C
4% (2)
D
2% (1)

Explanation

Cortex XDR Live Terminal uses the WebSocket protocol to establish a real-time, bidirectional communication channel between the Cortex XDR console and the agent on the endpoint. WebSocket is well-suited for this use case because it maintains a persistent connection over a single TCP connection, enabling low-latency, interactive command execution. The other options - NetBIOS over TCP, UDP with a random port, and TCP over port 80 as a raw connection - are not used by Live Terminal.

Topics

#Live Terminal#Agent Communication#WebSocket Protocol

Community Discussion

No community discussion yet for this question.

Full PCDRA Practice