When reaching out to TAC for additional technical support related to a Security Event; what are two critical pieces of information you need to collect from the Agent? (Choose Two)

Question

Options

• AThe agent technical support file.
• BThe prevention archive from the alert.
• CThe distribution id of the agent.
• DA list of all the current exceptions applied to the agent.
• EThe unique agent id.

• A
  70% (19)
• C
  4% (1)
• D
  11% (3)
• E
  15% (4)

Explanation

When reaching out to TAC for additional technical support related to a security event, two critical pieces of information you need to collect from the agent are: The agent technical support file. This is a file that contains diagnostic information about the agent, such as its configuration, status, logs, and system information. The agent technical support file can help TAC troubleshoot and resolve issues with the agent or the endpoint. You can generate and download the agent technical support file from the Cortex XDR console, or from the agent itself. The prevention archive from the alert. This is a file that contains forensic data related to the alert, such as the process tree, the network activity, the registry changes, and the files involved. The prevention archive can help TAC analyze and understand the alert and the malicious activity. You can generate and download the prevention archive from the Cortex XDR console, or from the

No community discussion yet for this question.