Palo Alto Networks Exam PCSAE Topic 1 Question 15 Discussion

Actual exam question for Palo Alto Networks's PCSAE exam

Question #: 15
Topic #: 1

An engineer's organization system is registered in the following manner: . The engineer created a new indicator type for detecting systems using regex. The engineer would now like the username to be created as a separate 'User' indicator automatically once a system is found.

What is the most efficient way for the engineer to achieve this?

ACreate a custom indicator field named 'username' and link it to the internal system indicator

BChange the reputation command for the internal system indicator type

CCreate a new indicator type of the internal username and set a formatting script to extract only the
username

DCreate a new indicator type of the internal username and have the regex included on any string that has dash at the beginning

Show Suggested Answer

Suggested Answer: B

by Elouise at May 06, 2022, 09:06 PM

Limited Time Offer

25%

Off

Get Premium PCSAE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!