When reaching out to TAC for additional technical support related to a Security Event; what are two critical pieces of information you need to collect from the Agent? (Choose two.)
When reaching out to TAC for additional technical support related to a Security Event; what are two critical pieces of information you need to collect from the Agent? (Choose two.)
Two critical pieces of information to collect from the Agent when reaching out to TAC for technical support related to a Security Event are the unique agent id and the agent technical support file. The unique agent id is essential for identifying which specific agent has encountered the issue, while the technical support file contains detailed logs and data necessary for diagnosing and resolving the issue effectively.
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Prevent-Administrator-Guide/Retrieve-Support-Logs-from-an-Endpoint changing answer to A & D from reviewing this link
I can't cite the source, but I believe the answers should be B and D
This should be A and D Alert Data dump Agent Tech support file