BlackFriday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Palo Alto Networks Exam PCSAE Topic 1 Question 62 Discussion

Actual exam question for Palo Alto Networks's PCSAE exam
Question #: 62
Topic #: 1
[All PCSAE Questions]

A SOC analyst needs to retrieve the list of all open phishing incidents in the last 30 days. What is the correct query to use?

Show Suggested Answer Hide Answer
Suggested Answer: C

Contribute your Thoughts:

Arlette
7 months ago
Hmm, you make a good point, Laila. Maybe option B would be a better choice, since it has the 'status:closed' without the negative sign.
upvoted 0 times
Agustin
6 months ago
Yeah, I agree with you. Option B looks like the correct query to use.
upvoted 0 times
...
Matthew
6 months ago
Option A seems to be the most logical choice.
upvoted 0 times
...
Kenneth
6 months ago
I'm not sure, but I think option C might be the correct one.
upvoted 0 times
...
Shaun
6 months ago
I'm leaning towards option D for the query.
upvoted 0 times
...
Cassi
6 months ago
Actually, I think option C is the best choice.
upvoted 0 times
...
Aretha
6 months ago
Hmm, I disagree. I believe option A is the right query to use.
upvoted 0 times
...
Rozella
6 months ago
I think option B is correct.
upvoted 0 times
...
...
Laila
7 months ago
I'm not sure about that. Option A has a negative sign before the 'status:closed', which seems a bit counterintuitive to me. Wouldn't we want to retrieve the open incidents, not the closed ones?
upvoted 0 times
...
Leila
7 months ago
Well, the question is asking for the correct query to use, so we need to analyze the answer options carefully. I'm leaning towards option A, since it seems to be the most straightforward approach.
upvoted 0 times
...
Franklyn
7 months ago
Alright, let's take a look at this question. It seems like we need to retrieve a list of all open phishing incidents in the last 30 days. What do you guys think about this?
upvoted 0 times
...

Save Cancel