Which two signs indicate that an endpoint requires an agent update? (Choose two)

The Cortex XDR console provides direct indicators when an agent requires an update. The most explicit sign is the agent's health status displaying "Outdated version" or a similar flag in the endpoint management view. Additionally, an update is required if you intend to apply new prevention rules or policy features that are only supported by a newer agent version. The console will often warn that a policy setting is incompatible with older agents, necessitating an upgrade to ensure full protection and policy enforcement.

A. Frequent false positives in alerts: This is typically addressed by tuning policies or through content updates, not necessarily a full agent software upgrade.
D. Dashboard reporting latency: This is a system performance issue related to the console, network, or data processing, not the agent version on an endpoint.

1. Palo Alto Networks. (2023). Cortex XDR Administrator's Guide. "Endpoints > Endpoint Management". The documentation describes the various agent statuses visible in the console, including statuses that indicate an outdated or unsupported version.

2. Palo Alto Networks. (2023). Cortex XDR Release Notes. "New Features" section for any given release. Release notes frequently state that new protection modules or policy features require a minimum agent version for compatibility and functionality.