The cytool adaptivepolicy recalc command forces the Cortex XDR agent to re-evaluate its network parameters to determine its location (e.g., on the corporate network or an external network). As part of this process, the command's output indicates which policy is being applied based on the detected location. This provides a direct way for an administrator to "look up" or verify the currently active policy profile on the endpoint, which is a common troubleshooting step for policy-related issues.

A. cytool adaptivepolicy interval 0: This command is used to configure the time interval for adaptive policy checks, not to query or look up the currently applied policy.

B. cytool payloadexecution query: This command queries the status of a single, specific protection module (payload execution) and does not provide information about the overall policy profile.

D. cytool persist print agentsettings.db: This command displays a raw data dump of all agent settings from its database. While it contains the policy's configuration, it does not provide a simple, direct lookup of the policy profile's name.

1. Palo Alto Networks Cortex XDR™ Agent Administrator's Guide (Version 8.2), Chapter: "Troubleshoot the Agent", Section: "Use cytool". The guide describes the adaptivepolicy recalc command as the method to "Force the agent to re-evaluate the adaptive policy rules based on the current network parameters." This action's output confirms which policy is applied. The guide also details the persist print command, showing its function is to display database contents, not to identify the policy profile name.