Q: 7
[Post-Deployment Management and Configuration]
What happens when the XDR Collector is uninstalled from an endpoint by using the Cortex XDR
console?
Options
Discussion
Option C that's the retention you see in official guides and practice tests. If you want to double check, go through the latest admin guide or sample exam.
In official docs and most practice tests for XDR, configuration retention is usually set to the default (90 days), but I've seen some guides reference 7 days too. Anyone confirm from the latest admin guide?
C tbh, that's what the docs say for default retention. The collector waits for the next heartbeat before the uninstall completes and keeps config data for 90 days unless you change that policy. D trips people up because it sounds immediate but that's only if the org has set a custom period. Correct me if I'm wrong, but C matches normal deployments.
C or D? For default config retention I'm pretty sure it's C, config sticks 90 days after uninstall.
B tbh, since config data could be kept only 7 days if org has set a custom retention. The question doesn't mention default policy, and I've seen places limit it for compliance reasons. If it's really always 90 by default then maybe C fits better. Anyone else run into this on a real tenant?
Nah, it's C. The uninstall kicks in at the next heartbeat and config data sticks around for 90 days unless you've set it differently. Pretty sure docs back that up, but open to being corrected if I'm missing a twist.
B tbh, since some docs mention config data sticks around for just 7 days, not 90. C seems like a trap here.
B is wrong, C. Encountered exactly similar question in my exam and config data sat for 90 days post-uninstall, not deleted instantly.
Its C
I don't think D is right here since config data isn't wiped instantly. C makes sense because the uninstallation waits for the next heartbeat and keeps config for 90 days, that's in line with what I’ve seen in exam reports.
Be respectful. No spam.
