Which two actions should analysts validate after a new agent version deployment? (Choose two)

After deploying a new agent version, the primary goal is to validate that the upgrade was successful and that the endpoint's security posture has not been compromised. Analysts should first confirm that the agent has re-established communication and is in a 'Protected' state, indicating it is healthy and licensed. Second, they must verify that the security policies assigned to the endpoint are still being enforced correctly, ensuring that protection capabilities like malware prevention and exploit protection are active and functioning with the new agent version.

C. Dashboard refreshing is a function of the Cortex XDR user interface and is not a direct indicator of an individual agent's post-upgrade health.
D. An agent upgrade should preserve existing configurations, including exclusions. Removing all exclusions would be an undesirable and erroneous outcome.

1. Palo Alto Networks, Cortex XDR Agent Administrator’s Guide. "Upgrade the Cortex XDR Agent". The post-upgrade verification steps emphasize checking the agent status on the endpoint and in the console to ensure it returns to 'Protected'.

2. Palo Alto Networks, Cortex XDR Administrator's Guide. "Manage Endpoints". This guide details how to verify policy enforcement and agent status, which are critical steps after any change, including an agent version deployment.