Palo Alto Networks Exam PSE-Cortex Topic 1 Question 49 Discussion

Actual exam question for Palo Alto Networks's PSE-Cortex exam

Question #: 49
Topic #: 1

[All PSE-Cortex Questions]

Which two entities can be created as a BIOC? (Choose two.)

Afile

Bregistry

Cevent log

Dalert log

Show Suggested Answer

Suggested Answer: A, B

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/investigation-and-response/cortex-xdr-indicators/working-with-biocs/create-a-bioc-rule.html

by Alishia at Feb 08, 2024, 01:11 AM

Limited Time Offer

25%

Off

Get Premium PSE-Cortex Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shawnna

6 months ago

I believe the correct options are C) event log and B) registry for creating a BIOC.

upvoted 0 times

...

Antonio

6 months ago

I would choose A) file and D) alert log as the entities that can be created as a BIOC.

upvoted 0 times

...

Blair

6 months ago

I agree with Andra, creating a BIOC can involve files and event logs.

upvoted 0 times

...

Andra

7 months ago

I think the correct answers are A) file and C) event log.

upvoted 0 times

...

Leanora

7 months ago

That's true, D) alert log is crucial for monitoring and troubleshooting.

upvoted 0 times

...

King

7 months ago

I'm not sure about C) event log. I think D) alert log makes sense because it contains important information.

upvoted 0 times

...

Stanford

7 months ago

I agree with A) file, but I think C) event log could also be created as a BIOC.

upvoted 0 times

...

Leanora

7 months ago

I think it's A) file and D) alert log.

upvoted 0 times

...

Pamella

8 months ago

Oh man, this question is tricky. I'm going to have to think about it a bit more. Maybe we should ask the instructor for a hint or something?

upvoted 0 times

Mitsue

7 months ago

We can always double check with the instructor if needed.

upvoted 0 times

...

Janine

8 months ago

That makes sense, let's go with those two.

upvoted 0 times

...

Katlyn

8 months ago

I think it's A) file and C) event log.

upvoted 0 times

...

Kenny

8 months ago

Let's think it through together.

upvoted 0 times

...

Hermila

8 months ago

C) event log

upvoted 0 times

...

Stephaine

8 months ago

A) file

upvoted 0 times

...

Rima

8 months ago

I'm leaning towards B and C. Registry and event log sounds like the kind of entities that could be created as a BIOC, but I'm not too sure about the others.

upvoted 0 times

...

German

8 months ago

Yeah, I was thinking the same thing. I'm guessing it's probably something like a file or a registry that can be monitored for changes or events. But I'm not sure about the other options.

upvoted 0 times

...

Bernardo

8 months ago

Hmm, this is an interesting question. I'm not entirely sure about the correct answer, but I think it might have to do with creating entities that can be monitored or tracked in some way.

upvoted 0 times

...