Palo Alto Networks XSIAM Engineer — Question 35

A Cortex XSIAM engineer at a SOC downgrades a critical threat intelligence content pack from the Cortex Marketplace while performing routine maintenance. As a result, the SOC team loses access to the latest threat intelligence data.
Which action will restore the functionality of the content pack to its previously installed version?

Answer options

• A. Contact Palo Alto Networks Support to create an exception to revert to the previously installed version.
• B. Back up the current configuration and data, then revert to the previously installed version.
• C. Remove all integrations and playbooks associated with the content pack, then revert to the previously installed version.
• D. Directly reinstall the previously installed version over the current one.

Correct answer: D

Explanation

Reinstalling the previously installed version directly over the current one (option D) effectively restores the content pack to its former state, allowing access to the latest threat intelligence data. The other options either involve unnecessary steps or do not directly address restoring the functionality of the content pack.