XSIAM-ENGINEER · Question #30
Before initiating a malware scan action on a Linux workstation, an engineer notices that the Cortex XDR agent's operational status on the workstation is reporting as "partially protected." There…
The correct answer is B. The Linux endpoint's kernel modules failed to load due to unsupported kernel versions. C. The agent is outdated and requires an upgrade to the latest version to regain full protection. The "partially protected" status on a Linux endpoint typically occurs when the kernel modules fail to load because of unsupported kernel versions or when the agent is outdated and requires an upgrade. Both conditions prevent the agent from providing full protection capabilities.
Question
Before initiating a malware scan action on a Linux workstation, an engineer notices that the Cortex XDR agent's operational status on the workstation is reporting as "partially protected." There have been no configuration changes made from the Cortex XSIAM server. What are two explanations for this operational status? (Choose two.)
Options
- AThe Linux endpoint is currently running 4.0 kernel version.
- BThe Linux endpoint's kernel modules failed to load due to unsupported kernel versions.
- CThe agent is outdated and requires an upgrade to the latest version to regain full protection.
- DThe agent was manually disabled on the endpoint by the user or an administrator.
How the community answered
(42 responses)- A14% (6)
- B81% (34)
- D5% (2)
Explanation
The "partially protected" status on a Linux endpoint typically occurs when the kernel modules fail to load because of unsupported kernel versions or when the agent is outdated and requires an upgrade. Both conditions prevent the agent from providing full protection capabilities.
Topics
Community Discussion
No community discussion yet for this question.