Palo Alto Networks XSIAM Engineer — Question 5

Which cytool command will look up the policy being applied to a Cortex XDR agent?

Answer options

• A. cytool adaptive_policy interval 0
• B. cytool payload_execution query
• C. cytool adaptive_policy recalc
• D. cytool persist print agent_settings.db

Correct answer: C

Explanation

The correct answer is C, as the 'cytool adaptive_policy recalc' command is specifically designed to recalculate and display the policy applied to the agent. Options A and D do not relate to policy lookup, and B focuses on querying payload execution, which is unrelated to the current policy status.