Which of the following are the primary roles available in Cortex XDR? (Choose two)

Cortex XDR provides several predefined roles to manage user access and permissions. The 'Account Administrator' role has full permissions to manage the Cortex XDR instance, including settings, users, and agents. The 'Incident Responder' role is specifically designed for security personnel who need to investigate, manage, and respond to security incidents and alerts. These two represent fundamental administrative and operational functions within the platform.

C. Threat Hunter: While threat hunting is a key activity performed in Cortex XDR, "Threat Hunter" is not a predefined role within the platform's role-based access control (RBAC) system.

D. Data Analyst: "Data Analyst" is a generic job title and not a specific, predefined role in Cortex XDR. The closest predefined role would be 'Security Analyst'.

1. Palo Alto Networks, "Cortex XDR Administrator's Guide", Section: "Manage Roles", Subsection: "Roles". This section lists the predefined roles available in Cortex XDR, which include "Account Administrator" and "Incident Responder".