Which two operational states indicate communication issues between an agent and console? (Choose two)

The operational state of a Cortex XDR agent provides insight into its health and communication status. A "Disconnected" state explicitly indicates that the agent has lost its connection to the Cortex XDR console and is not sending heartbeats. An "Outdated" state signifies that the agent has failed to update its security content for a defined period, which is a common symptom of a persistent communication issue with the update server or the console, preventing the download of the latest content.

B. "Disabled" is an administrative state, manually set by an administrator to turn off the agent's protection capabilities, not an indicator of a communication problem.
D. "Protected" is the ideal operational state, indicating the agent is communicating correctly, is up-to-date, and is actively enforcing security policies.

1. Palo Alto Networks. (2023). Cortex XDR Administrator’s Guide. "Endpoint Administration," Section: "Cortex XDR Agent Statuses." This section defines the various agent statuses, explicitly linking "Disconnected" to a loss of communication and "Outdated" to a failure in receiving content updates.

2. Palo Alto Networks. (2023). Cortex XDR Agent Administrator’s Guide. "Cortex XDR Agent Operational Status." This guide provides detailed descriptions of each status, confirming that "Disconnected" and "Outdated" relate to communication or content delivery failures.