Which statement regarding scripts in Cortex XDR is true?

The correct answer is B. The level of risk is assigned to the script upon import. When you import a script to the Agent Script Library in Cortex XDR, you need to specify the level of risk associated with the script. The level of risk determines the permissions and restrictions for running the script on endpoints. The levels of risk are: Low: The script can…

Submitted by haruto_sh· Apr 18, 2026Investigation and Response

Question

Options

AAny version of Python script can be run.
BThe level of risk is assigned to the script upon import.
CAny script can be imported including Visual Basic (VB) scripts.
DThe script is run on the machine uploading the script to ensure that it is operational.

How the community answered

(28 responses)

A
7% (2)
B
89% (25)
D
4% (1)

Explanation

When you import a script to the Agent Script Library in Cortex XDR, you need to specify the level of risk associated with the script. The level of risk determines the permissions and restrictions for running the script on endpoints. The levels of risk are: Low: The script can be run on any endpoint without requiring approval from the Cortex XDR administrator. The script can also be used in remediation suggestions or automation actions. Medium: The script can be run on any endpoint, but requires approval from the Cortex XDR administrator. The script can also be used in remediation suggestions or automation actions. High: The script can only be run on isolated endpoints, and requires approval from the Cortex XDR administrator. The script cannot be used in remediation suggestions or automation actions.

Topics

#Script management#Cortex XDR features#Risk classification#Automation

Community Discussion

No community discussion yet for this question.

Full PCDRA Practice