Which two steps should be considered when configuring the Cortex XDR agent for a sensitive and highly regulated environment? (Choose two.)

Question

Options

• AEnable critical environment versions
• BCreate an agent settings profile where the agent upgrade scope is maintenance releases only
• CCreate an agent settings profile, enable content auto-update, and include a delay of four days
• DEnable minor content version updates

• A
  17% (3)
• B
  78% (14)
• D
  6% (1)

Explanation

In a sensitive, highly regulated environment, change control is paramount - so agent upgrades should be restricted to maintenance releases only (B), which are minor stability/security patches rather than feature-heavy upgrades that could disrupt operations. Pairing this with content auto-update plus a four-day delay (C) ensures threat intelligence stays current while giving your team a buffer to catch any issues before the update propagates broadly.

Why the distractors are wrong:

• A ("Enable critical environment versions") is not a real Cortex XDR configuration option - it's a distractor using plausible-sounding terminology.
• D ("Enable minor content version updates") is too permissive for a regulated environment; it bypasses the delay-and-review buffer that compliance frameworks typically require.

Memory tip: Think "restrict + delay" - in regulated environments you restrict the upgrade scope (maintenance only, not full minor versions) and delay content updates (four days) to maintain control. If an answer sounds like it widens the update scope, it's wrong.

No community discussion yet for this question.